News for hackers. Stuff that matters.
Re:The Insecurity of OpenBSD (2010) by nickpsecurity on Wednesday November 30, 2016 @06:43PM (#13075744)
SELinux was a demonstrator of Type Enforcement by Mitre. It got put into production because why not. There's simpler schemes out there for MAC even on Linux. I'd have recommended OpenBSD clean-slate something like them.

I do like pledge, though. I promoted API reduction a long time. Even deleting the code in kernel for appliances a la Poly2 project. Only so much can be gained with it, though.

There are no comments on this comment yet.