Re:Systemd redux: The end of Linux
by erglkjahlkh on Friday November 21, 2014 @09:45AM
(#8641448)
Unfortunately FreeBSD doesn't have very good MAC system. Capsicum and friends implement only ~10% of what SELinux offers. Also the virtualization is far more basic, and lacks tooling (it's like receiving a huge bag of Legos and instructions on how to build space shuttle).
[ Parent
| on HN ]
Re:Systemd redux: The end of Linux
by the_why_of_y on Saturday November 22, 2014 @08:58AM
(#8645547)
IMHO Capsicum has significant potential to provide similar real-word security improvements in a far simpler way than SELinux (once the relevant profiling of daemons is done); there was some work by somebody at Google to port it to Linux and I hope that will be usable sometime soon.