Mandatory Access Control ?
Steve Kinney
admin at pilobilus.net
Mon Nov 30 08:46:27 PST 2015
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 11/30/2015 04:24 AM, James Harrison wrote:
> On 29/11/2015 17:28, c4p0 wrote:
>> someone can give me your opinion about it?
>
> SELinux on Jessie is a nightmare since there's no maintainers
> for the refpolicy/MLS packages any more.
>
> AppArmor is probably the way to go, though it's pretty limited
> in what it can do.
A feature comparison;
http://www.cyberciti.biz/tips/selinux-vs-apparmor-vs-grsecurity.html
Yet another option: Create your own 'Live DVD' from a shiny new
security-enhanced OS instance, use encrypted R/W media for data
file persistence. Anything that does climb out of its sandbox
won't persist beyond the current session.
:o)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=KWwg
-----END PGP SIGNATURE-----
More information about the cypherpunks
mailing list