Re:GCHQ's Boiling Frogs paper on software development
by kirykl on Monday May 16, 2016 @09:41AM
(#11706158)
NSA has a linux distro https://en.wikipedia.org/wiki/Security-Enhanced_Linux
[ Parent
| on HN ]
Re:GCHQ's Boiling Frogs paper on software development
by floatboth on Monday May 16, 2016 @02:36PM
(#11708497)
SELinux is not a distro. It's an Linux Security Module (Mandatory Access Control thing) that comes with the upstream kernel that sysadmins need to STOP TURNING OFF: http://stopdisablingselinux.com
There are alternatives though. SELinux was designed for big machines with multiple physical users. You can use it with pretty much any scenario (and Android uses it for sandboxing apps), but AppArmor is much easier for common personal desktops and web servers.
On FreeBSD and Darwin, the similar thing is TrustedBSD: http://www.trustedbsd.org/mac.html
Re:GCHQ's Boiling Frogs paper on software development
by xrorre on Monday May 16, 2016 @10:25AM
(#11706448)
Qubes is exponetially superior to this distro. Open that PDF in a disposable Fedora sandbox, and physically disable the network plz
Re:GCHQ's Boiling Frogs paper on software development
by justinclift on Tuesday May 17, 2016 @07:10AM
(#11712584)
Because sandbox escapes aren't a thing GCHQ would have any knowledge of yeah?
/s