Posted Sep 23, 2004 4:57 UTC (Thu) by walters
In reply to: Complexity
Parent article: An introduction to SELinux
The point is that securing a complex system is going to be complex. There simply aren't any shortcuts.
However, as Stephen says, SELinux is very flexible, as is exemplified by the new targeted policy. The targeted policy is really quite simple, and it's *very* easy to just turn restrictions on a particular service off now with the support for runtime boolean policy changes.
to post comments)