[KLUG Members] SELinux anyone?
Peter Buxton
members@kalamazoolinux.org
Fri, 25 Jul 2003 23:31:37 -0400
On Fri, Jul 25, 2003 at 10:24:48AM -0400, Bruce Smith was only escaped
alone to tell thee:
> Speaking of which, does anyone know how selinux compares to
> grsecurity?
>
> http://www.grsecurity.net/
SELinux had more work on Mandatory Access Control, IIRC, which limits
file/memory sharing between apps and users. grsecurity features
hack-proofing such as non-executable stacks and pages.
I don't know much about these projects firsthand, but you can find more
info at:
http://pageexec.virtualave.net/
home of PaX for Linux. As PaX is a part of grsecurity, so is PaX made of
several patches. PaX is also in OpenBSD as a now-standard part of the
new dist--uh, tree? release?
--
-56
[The Basement Tapes were] like the Watergate tapes... Bob
would say, 'We should destroy this.' -- Robbie Robertson