Mandatory Access Control ?

Steve Kinney admin at pilobilus.net
Mon Nov 30 08:46:27 PST 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11/30/2015 04:24 AM, James Harrison wrote:
> On 29/11/2015 17:28, c4p0 wrote:
>> someone can give me your opinion about it?
> 
> SELinux on Jessie is a nightmare since there's no maintainers
> for the refpolicy/MLS packages any more.
> 
> AppArmor is probably the way to go, though it's pretty limited
> in what it can do.

A feature comparison;

http://www.cyberciti.biz/tips/selinux-vs-apparmor-vs-grsecurity.html

Yet another option:  Create your own 'Live DVD' from a shiny new
security-enhanced OS instance, use encrypted R/W media for data
file persistence.  Anything that does climb out of its sandbox
won't persist beyond the current session.

:o)











-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=KWwg
-----END PGP SIGNATURE-----



More information about the cypherpunks mailing list