LCA: How to improve Debian security

LCA: How to improve Debian security

Posted Jan 21, 2007 15:45 UTC (Sun) by job (subscriber, #670)
Parent article: LCA: How to improve Debian security

I'm not convinced SELinux makes a system more secure; it is after all a huge body of code that none of the kernel maintainers is familiar with. How do we know it doesn't contain race conditions or overflows that can be used to escalate SELinux privileges?

There are many ACL-style capability systems beside SELinux, such as RSBAC, LIDS and grsecurity. SELinux does much more than they do, it has an elaborate system of roles that extends the user id model. Many tutorials only describe the ACL parts. But if all you want is fancy capabilities, you are probably better off with a simpler (and better understood) system.

It would surely make a good LWN article series!

---

(Log in to post comments)