What is this SElinux in Fedora Code release 2 crap

[tonimontanna]

What is this SElinux doing in the Fedora code? The govt. can't do anything right how it is. Now, they want to screw up linux. Is this SElinux thing just a linux kernel. Can we see the code? If redhat starts using the SElinux in all of their code then its time to switch. Microsoft can have a back door for the govt. but I use linux to aviod this problem.

:mad:

[MighMos]

Um, we can see the code can we not?
[edit] And if you're that concerned about it, dl the kernel source and build your own kernel.

[dboyer]

I think your tinfoil had may be a little too tight, my friend!

hehe...

just kidding :)

[tonimontanna]

:D

[sploo22]

Um, I'm speechless.

[sharth]

http://www.nsa.gov/selinux/

http://www.nsa.gov/selinux/patches/2.6.3-selinux2.patch.gz
http://www.nsa.gov/selinux/archives/selinux-usr-2004031009.tgz

theres your source code.

[EnigmaOne]

Originally posted by tonimontanna
What is this SElinux doing in the Fedora code? The govt. can't do anything right how it is. Now, they want to screw up linux. Is this SElinux thing just a linux kernel. Can we see the code? If redhat starts using the SElinux in all of their code then its time to switch. Microsoft can have a back door for the govt. but I use linux to aviod this problem.

:mad:

::: blink-blink :::

Anyway, as I was saying...this priest, a rabbi and a saint bernard walk into a bar...

[pezplaya]

Is there an advantage to using this SElinux?

[Icarus]

Well...flame on!

I dub thee thread, "Sir Flamebait"!

[JohnT]

What's all the fuss about........pass the tinfoil and begone with you:p

[sploo22]

Originally posted by pezplaya
Is there an advantage to using this SElinux?

From selinux.sourceforge.net:

SELinux was created by the National Security Agency as an example of how mandatory access controls that can confine the actions of any process, including a superuser process, can be added into Linux. The focus of that work has not been on system assurance or other security features such as security auditing, although these elements are also important for a secure system.

The security mechanisms implemented in the system provide flexible support for a wide range of security policies. They make it possible to configure the system to meet a wide range of security requirements. The release includes a general-purpose security policy configuration designed to meet a number of security objectives as an example of how this may be done. The flexibility of the system allows the policy to be modified and extended to customize the security policy as required for any given installation.

IIRC, Gentoo has a demo box running SELinux. They put the root password on the website, but you ssh in and get "access denied" on all the juicy stuff :D

[Icarus]

And answers like the one sploo22 gave is the reason the thead is not locked :D

[bwkaz]

SELinux sounds a lot like the grsecurity ACL system.

Root can't do squat on my router machine either. Unless, of course, you know how to turn off the ACL system. ;)

[sploo22]

I'm listening... :D

[hard candy]

Root can't do squat on my router machine either. Unless, of course, you know how to turn off the ACL system.




yea, it's a good thing I know how to turn off ACL on bwkaz's machine or I'd never get any work done! BW, will you stop hogging all the disk space! And the RAM too, turn off some of those services, will ya? how's a guy supposed to get any work done with the owner using up all the resources.

[bwkaz]

:D

That's what you get when you log into a machine with only an 800MHz processor and 256MB of memory, HC. And the 5GB hard drive is just a "duh"... :p