SELinux

mike cloaked mike.cloaked at gmail.com
Mon Aug 30 20:16:23 UTC 2010


On Mon, Aug 30, 2010 at 2:27 PM, Genes MailLists <lists at sapience.com> wrote:
>
>
>   Dan - thank you. selinux is outstanding - and through your efforts
> (and others) especially on the fedora policy files, grown over the last
> several years into something really useful.
>
>   Anti-selinux folk. It takes work to  deploy it on some systems for
> sure and I am just learning - i have a lot of work on one system to get
> it compliant. For many setups targeted policy works with no changes at all.
>
>   Please avoid the rude remarks - i.e. be excellent :)
>
>   If some of you are not using it fine. But to claim it has little or
> no security suggests nothing but enormous ignorance of security issues.
>
>  If one does not have the xxx (time, resources, ability, whatever) to
> make the effort to tune those systems which need some work fine - dont
> do it - that decision has nothing to do with security - only _your_
> choices.
>
>
>  To Dan, Stephen (and the NSA) and all the others - thank you for
> helping advance linux security.

I whole-heartedly concur - and indeed I have had a lot of help at
times from Dan W in particular who has so many times devoted his time
to helping people, also to Stephen S and the unseen names from NSA who
have made huge advances in security through creating and developing
selinux to the point where for the most part it is quite transparent
to most users for much of the time.

-- 
mike c


More information about the users mailing list