Compartmentalized computing with CLIP OS

Posted Oct 31, 2018 14:09 UTC (Wed) by marcH (subscriber, #57642)
In reply to: Compartmentalized computing with CLIP OS by ortalo
Parent article: Compartmentalized computing with CLIP OS

> But while "SE" lead to very low level (and possibly very difficult to use)

Not difficult at all, look: https://www.google.com/search?q=disable+selinux (over 1 million hits!)

In *some* situations disabling SElinux can make the system... more secure by removing the false sense of security provided by an obviously misconfigured solution.

Knowing where it came from, I've always wondered if anyone involved in the design actually expects SELinux to be frequently misconfigured.