Impedance matching for BPF and LSM

Posted Feb 27, 2020 20:39 UTC (Thu) by mohg (guest, #114025)
In reply to: Impedance matching for BPF and LSM by Cyberax
Parent article: Impedance matching for BPF and LSM

I've used Scientific Linux (6, 7) and CentOS (8) with SELinux enforcing (on 7 and 8; can't remember about 6) for 6+ years. Works fine for me. I find it a well documented and implented feature.

As a binary rebuild of RHEL, Scientifix Linux supports whatever the equivalent RHEL does.
I have no idea in what sense it could be said to "pretty much ignore SELinux".

Impedance matching for BPF and LSM

Posted Feb 27, 2020 20:46 UTC (Thu) by Cyberax (✭ supporter ✭, #52523) [Link]

> As a binary rebuild of RHEL, Scientifix Linux supports whatever the equivalent RHEL does.
> I have no idea in what sense it could be said to "pretty much ignore SELinux".
The problem is that SL doesn't do anything with SELinux. If you use it as a RHEL rebuild it works just as RHEL.

However, plenty of software doesn't support it. Like SUN (RIP) Grid Engine forks, or good old Hadoop.