Re: [PLUG] grsec or selinux?

[LeRoy Cressy <ldc@lrcressy.com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I set up a laptop with selinux on it and I found that it is a bear to 
get going, but on the otherhand the security is and how you can improve 
on the file permissions is extensive.  It will take a long time to get a 
good understanding on what you are doing.

Along with all of the linux documentation I suggest reading the FLASK 
documentation available at the NSA.

http://www.nsa.gov/selinux/

I know that there are some in this group who won't use anything that is 
created by the NSA, but since selinux is open source and the code is 
being maintained by people all over the world, I think that it is a safe 
system for enhancing Linux security.

sean finney wrote:
> hi guys,
>
> out of curiosity, is anyone here using either selinux or
> grsec security patches?  i've done some initial reading on the
> differences between and benefits of both systems and it
> seems that selinux is more robust than grsec, but on
> the flipside, grsec seems easier to get going and less invasive
>
> anyone on plug have experiences with either?  
>
>
> 	sean

- -- 
Rev. LeRoy D. Cressy   mailto:leroy@lrcressy.com   /\_/\
                       http://lrcressy.com        ( o.o )
                       Phone:  215-535-4037        > ^ <
                       FAX:    215-535-4285

gpg fingerprint:  62DE 6CAB CEE1 B1B3 359A  81D8 3FEF E6DA 8501 AFEA

For info on enigmail:    http://lrcressy.com/linux/mozilla.pdf
For info on gpg:         http://www.gnupg.org/

Jesus saith unto him, I am the way, the truth, and the life:
no man cometh unto the Father, but by me. (John 14:6)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Using GnuPG with Netscape - http://enigmail.mozdev.org

iD8DBQE/zI2GP+/m2oUBr+oRAhidAJwNfzDKUYEFShml+RZ2NNgIavLBzQCdHy8q
ugiHPgiW27wYhst+gVh6mLE=
=kBtO
-----END PGP SIGNATURE-----

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug