selinux

[Panos Prokopiou]

On Monday 28 August 2006 20:46, Antonios Anastasiadis wrote:
> γειά στη λίστα.
> Θα ήθελα εντυπώσεις από χρήστες του selinux.

pleon pistevo oti den einai kathoristikos paragontas sthn epilogh distro.
afth th stigmh trexo suse, opou h (theth) mama novell lansarei to apparmor.
To mandriva paizei me grsec...

genika to topoio oso anafora to thema einai akoma poli poli tholo.

> Ακούγεται γενικά οτι είναι μανικι στο στήσιμο, policies κλπ

prosopika den pedeftika katholou. epeze out of the box. Pantos to na grapseis 
policy den einai efkolo, giati kaneis den mporei na sou eggiithei oti to 
ekastote policy den afinei kapoio keno.

Uparxei ena performance overhead.

> Υπάρχει κανείς εδώ που να το δουλεύει σε production μηχάνημα;

oso production mporei na einai to laptop

> Τί διανομή;

h monh dianomh pou to foraei einai fedora, eidika to fc5 exei diafores 
beltioseis sth domh ton policies se sxesh me ta fc3,4 kai rhel4.

> Με grsec kernels παίζει καλά;

apo oso ksero isos kai na pezei me sugkekrimena patches mono, dld kapoia apo 
ta random pid, random port ktl... oxi oti kanei thn idia douleia me to 
selinux. Kai an den kano lathos oi grsec-ades den upostirizoun to lsm 
interface opote trexa gireve...


Prosopika pistevo oti to olo thema einai poli poli travigmeno. Xronia tora 
exoume asfalestata mixanimata kai xoris MAC ktl. Uparxoun polla epipeda 
asfaleias prin ftasoume sto selinux kai me ta misa kanoume th douleia mas.
To SELinux eidika pistevo oti mporei na kanei papades, alla thelei kai megala 
@@ gia na to stiseis. Giati mh mou peis oti tha afiseis ta default policies. 
Milame gia security. Epipleon to selinux einai sigoura gia prostasia 
multiuser mhxanimaton, gia single user mixanimata einai travigmeno.

--pprok