SELinux last straw

Arthur Pemberton pemboa at gmail.com
Wed Oct 17 19:45:24 UTC 2007


On 10/17/07, Matthew Miller <mattdm at mattdm.org> wrote:
> On Wed, Oct 17, 2007 at 02:19:55PM -0500, Les Mikesell wrote:
> > >1) familiarize ones self with the rules , as one has to do with
> > >traditional secuirty
> > But the traditional unix rules are extremely simple, and being able to
> > understand and verify them is one of their biggest virtues.
>
> +1. Simplicity, transparency, security. It doesn't matter how high tech your
> complicated fence is if it's so complicated that you would have no chance of
> noticing if the gate were accidentally left open.

Noticing said gate open isn't a problem with SELinux.

-- 
Fedora 7 : sipping some of that moonshine
( www.pembo13.com )




More information about the fedora-list mailing list