Linux fragmenting at last (blog post)

Linux fragmenting at last (blog post)

Posted Mar 2, 2006 13:14 UTC (Thu) by erich (subscriber, #7127)
In reply to: Linux fragmenting at last (blog post) by linuxbox
Parent article: Linux fragmenting at last?

I've used grsecurity, but it's ACLs were almost as bad to setup.
And they are pretty hard to define properly.
E.g. it makes a difference between calling
"somescript.pl"
and
"perl somescript.pl"

Which totally sucks, but applies to all languages with runtime environments, including Perl, Python, Java, Mono.

"Transitions" in SELinux are a really nice thing, most other ACL systems are lacking. and while I personally have little use for MCS and MLS (Multiple class security, multiple level security), they make perfect sense for corporate environments with multiple "trustedness" user levels.

---

(Log in to post comments)