Recent Features
| |||||||||||||
Linux fragmenting at last (blog post)Linux fragmenting at last (blog post)Posted Mar 1, 2006 17:58 UTC (Wed) by linuxbox (subscriber, #6928)In reply to: Linux fragmenting at last? by erich Parent article: Linux fragmenting at last?
Some interesting points in the blog post. Have you also worked with Grsecurity or RSBAC?
(Log in to post comments)
Linux fragmenting at last (blog post) Posted Mar 2, 2006 13:14 UTC (Thu) by erich (subscriber, #7127) [Link] I've used grsecurity, but it's ACLs were almost as bad to setup.And they are pretty hard to define properly. E.g. it makes a difference between calling "somescript.pl" and "perl somescript.pl"
Which totally sucks, but applies to all languages with runtime environments, including Perl, Python, Java, Mono.
"Transitions" in SELinux are a really nice thing, most other ACL systems are lacking. and while I personally have little use for MCS and MLS (Multiple class security, multiple level security), they make perfect sense for corporate environments with multiple "trustedness" user levels.
Linux fragmenting at last (blog post) Posted Mar 3, 2006 4:53 UTC (Fri) by ab (subscriber, #788) [Link] Still, what about RSBAC? It is far richer model than Grsecurity and comparable (even richer) with SELinux, yet easier to setup.
|
|||||||||||||