User: Password:
|
|
Subscribe / Log in / New account

Spengler: False Boundaries and Arbitrary Code Execution

Spengler: False Boundaries and Arbitrary Code Execution

Posted Jan 5, 2011 18:03 UTC (Wed) by SEJeff (subscriber, #51588)
In reply to: Spengler: False Boundaries and Arbitrary Code Execution by martinfick
Parent article: Spengler: False Boundaries and Arbitrary Code Execution

It seems like Information Assurance in the form of MAC (hello SELinux) is a cleaner option than capabilities where possible. I know that Fedora / RHEL taught libvirtd about SELinux and called it sVirt[1]. This seems like the best possible way forward over simple capabilities.

[1] http://selinuxproject.org/page/SVirt


(Log in to post comments)


Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds