[KLUG Members] SELinux anyone?

Peter Buxton members@kalamazoolinux.org
Fri, 25 Jul 2003 23:31:37 -0400


On Fri, Jul 25, 2003 at 10:24:48AM -0400, Bruce Smith was only escaped
   alone to tell thee:

> Speaking of which, does anyone know how selinux compares to
> grsecurity?
> 
> http://www.grsecurity.net/

SELinux had more work on Mandatory Access Control, IIRC, which limits
file/memory sharing between apps and users. grsecurity features
hack-proofing such as non-executable stacks and pages.

I don't know much about these projects firsthand, but you can find more
info at:

http://pageexec.virtualave.net/

home of PaX for Linux. As PaX is a part of grsecurity, so is PaX made of
several patches. PaX is also in OpenBSD as a now-standard part of the
new dist--uh, tree? release? 

-- 
-56
[The Basement Tapes were] like the Watergate tapes... Bob
would say, 'We should destroy this.' -- Robbie Robertson