Ask HN: SELinux, opinions?

Posted by antocv on Tuesday October 01, 2013 @05:02AM
from the ask-hn dept.

SELinux was developed primarily by NSA and I remember back in the day I had a distaste for using it just because of that fact. It was a huge code-base with hooks all over the place for various modules, just didnt sit right with security - minimize LOC and exposure. Instead I chose grsecurity and RBAC.

What is the opinion today, is SELinux preferred over alternatives such as Tomoyo?

( 3 comments | 3 points | on HN )

Re:Ask HN: SELinux, opinions? by gbraad on Tuesday October 01, 2013 @05:39AM (#6475107)

SELinux... do not turn it off! And when people tell you to do so are too lazy to understand it.

Never heard of Tomoyo... maybe AppArmor

[ Parent | on HN ]

Re:Ask HN: SELinux, opinions? by noja on Tuesday October 01, 2013 @05:15AM (#6475039)

SELinux is preferred: it's in Red Hat.

I've not heard of Tomoyo.

[ Parent | on HN ]

Re:Ask HN: SELinux, opinions? by anxiousest on Tuesday October 01, 2013 @05:58AM (#6475155)

SELinux default policies are usually written per distribution, by their maintainers. It's widely used and peer reviewed (Fedora, Red Hat) I'd trust it over any less involved attempt at emulating it.

[ Parent | on HN ]