-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 11/30/2015 04:24 AM, James Harrison wrote:
On 29/11/2015 17:28, c4p0 wrote:
someone can give me your opinion about it?
SELinux on Jessie is a nightmare since there's no maintainers for the refpolicy/MLS packages any more.
AppArmor is probably the way to go, though it's pretty limited in what it can do.
A feature comparison; http://www.cyberciti.biz/tips/selinux-vs-apparmor-vs-grsecurity.html Yet another option: Create your own 'Live DVD' from a shiny new security-enhanced OS instance, use encrypted R/W media for data file persistence. Anything that does climb out of its sandbox won't persist beyond the current session. :o) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJWXH1iAAoJEDZ0Gg87KR0LkLEQANjlKtPJNfm2nPUt8liC1yYH qj/3zX//OI8g/JqSHtj/V9wCMIld4glFgCiLzdPi+S+6ilIUwR6sQyRyOF6VvFye rg+w7qXorQOQ0gXdTm6EZwL3FS6V1HKLiFHFhDesGXdzimko/FysU+hCRre/ypJt JMiep+X/s923L6tl+V6EKSOtGhllO+tQ2QRmxMunu5aekjCjS7PRKYKgTzKaU37o Jvrvb+EbZ+urShnvAPfJF6rMEL2xHwdZIh3bdoyLE3GcNX57UZejR4Se3H+sl2o5 HFV5pj+YvHopDm4RgKCr4MlJeX43gDHO3soqfX25ie7Hxc+YRyjmcow23EWigNM8 kHcDvNfbR5GiDp7WrZ72W66D27zDZ+ebZ4LL0+DzT2sqUxquD2zCXY4LM7RDOSwn XC7pPXC2aqzV/w2RWN/6DrWH+GRCGeSNvIu+nMMN2l983h+iX6DZlPg04V4ruW5F s5pmTczJ1DuGQNXjCxfXiSGAJElIlzSi/8KbwivJrYkTdCvMstgzSJtY1LJvkK2U EgJyg7r40vqZqBNCqASJNQhxh9amKzypT7zJjRagUH3r18UBQ8mqbnSXYHK3vPMo L90oFUnnEM3q+Qm+lay45Apo3QSrtcjt9mAROtSedhJ2NdRLgI+o4UHhEVlFnSfp 8ap/2cnf1IEVjHYh65cU =KWwg -----END PGP SIGNATURE-----