LWN.net Logo

SELinux vs. (capabilities + file permissions)?

SELinux vs. (capabilities + file permissions)?

Posted Apr 8, 2004 14:08 UTC (Thu) by bkw1a (subscriber, #4101)
Parent article: Capabilities in 2.6

If the problems with capabilities noted above were fixed, how would
capabilities + file permissions compare with SElinux? What extra features
does SELinux get you? Are they worth the trouble?


(Log in to post comments)

SELinux vs. (capabilities + file permissions)?

Posted Apr 8, 2004 20:41 UTC (Thu) by jmshh (guest, #8257) [Link]

SELinux is much more than capabilities:
- More fine grained configurable
- Can prevent users to share access given to them
- Is role based, not just user or process
- Is more complex to administer
So you can do more with SELinux, but the price is a lot more work.

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds