On Sun, Jul 21, 2024 at 08:46:24AM +0800, jeremy ardley wrote: > A plug for SELinux. It's been around for a long time. It was invented by the > NSA for use by Government agencies but they kindly open sourced it and it's > available on many Distros including Debian. > > SELinux is a real pain to get right but when it finally works it's a > tremendous security boost for internet facing systems.
+1 I use SELinux. The documentation is awful - there are many different labels that are not documented as to how they should be used. When there is an issue ausearch will tell you what to do but not why, I have sometimes found that the recommendation is wrong and that enabling something else is a better solution. -- Alain Williams Linux/GNU Consultant - Mail systems, Web sites, Networking, Programmer, IT Lecturer. +44 (0) 787 668 0256 https://www.phcomp.co.uk/ Parliament Hill Computers. Registration Information: https://www.phcomp.co.uk/Contact.html #include <std_disclaimer.h>
