[ubuntu-hardened] security centerin ubuntu

John Dong jdong at ubuntu.com
Fri Apr 2 18:36:56 BST 2010


On Fri, Apr 02, 2010 at 01:20:33PM -0000, Nils-Christoph Fiedler wrote:
>guess isnt under development any longer) or selinux out there, but
>personally i dont trust selinux because of its history and read about
>some issues with it, referring to wrong setups and therefor a loss of
>security compared to a fresh installation.


I don't think this is true of SELinux; like AppArmor, it coexists with
the existing DAC permissions framework, and can only deny access that
DAC would otherwise allow, not grant permissions that DAC would have
denied.

John




More information about the ubuntu-hardened mailing list