vote
 |
|
The reason SELinux is complex is because Linux is a full-featured OS that requires it, said one expert. The next version of Red Hat Linux aims to simplify things with out-of-the-box policy modules that can ship with an application.
By controlling all operations, SELinux is exposing the complexities that happen on Linux systems. I'm not trying to give Linux a hard time for being complex. [After all,] Linux is a full-featured OS, and being full-featured comes with complexity. In order to develop policies, first you have to understand what kind of access an application needs. In RHEL5, there's SETroubleshoot. Every time an application requests access, this tool will alert the user, via a GUI application, email or message log, that an application has tried to access this file, at this time, and was denied.
| | |
| |
|
|
