Dailydave mailing list archives

Re: Media Excitement!


From: Cody Hatch <bytejump () gmail com>
Date: Fri, 22 Apr 2005 13:47:53 -0600

Are you familiar with grsecurity? I've worked with SELinux some, but
I'm much more familiar with grsecurity. How does SELinux compare?

Thanks,
Cody

On 4/22/05, robert () dyadsecurity com <robert () dyadsecurity com> wrote:

Domain/Type Enforcement managed by RBAC can be effective. From our
independant analisys the SE Linux project has implemented many security
mechanisms that start to mitigate the Transitory nature of privledges
and Trojan Horse problems that you have in DAC systems.  It's far from
complete, but a great start.  It is a worth while project to contribute
to, or simply study.

We use it on our laptops now (strict mode, custom policy).  It's a pain
in the ass to learn because it'll take you a couple of weeks just to
understand the concepts if you're new to them.  I'll be up front about
that now. :) ... but it's a free project.

That said, we're working on demonstration configurations to show off
what can be done today with SE Linux.  That project has a ton of
promise.

Robert

--
Robert E. Lee
CEO, Dyad Security, Inc.
W - http://www.dyadsecurity.com
E - robert () dyadsecurity com
M - (949) 394-2033

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
https://lists.immunitysec.com/mailman/listinfo/dailydave


Current thread: