SELinux last straw

[Rahul Sundaram]

Les Mikesell wrote:
> Arthur Pemberton wrote:
>>
>> Now, you're insinuating that his expectations of SELinux caused him to
>> practice poor traditional security and so he got hacked. Which
>> completely ignores the fact that he did not have SELinux when he got
>> hacked.
> 
> Are you saying it makes a difference if you've ssh'd in as root?

Sure it can.  It all depends on policy. SSH is by default in Fedora 
assigned a different policy which can be tuned to restrict access further.

Russell cooker has been for years running a SELinux system with open 
root access via ssh just to demonstrate this.

http://www.coker.com.au/selinux/play.html

Rahul