First SELinux impressions
Posted Apr 17, 2004 3:25 UTC (Sat) by dotpeople
In reply to: First SELinux impressions
Parent article: First SELinux impressions
What happened with the SE Linux patent dispute from a while back?
Have you tried LIDS? It supports a configuration
syntax similar to your suggestion.
LIDS + grsecurity (minus the ACL features, which overlap with LIDS) is competitive with
SE Linux. Especially in the usability (and therefore practical security) arena. At the least,
it's a good sandbox to learn about isolation.
The combination will work in a live linux CD for firewalls, etc.
to post comments)