NSA SE Linux

[X_console]

http://www.nsa.gov/selinux/
Has anyone used this? Opinions?

[berb]

X - I just installed and configured it (3+hours and 2 reinstalls of the OS - RH6.1 as they suggest)
First reinstall is because I had screwed around with the system prior to applying the kernel patch and the second was because the I had choosen not to install A LOT out of the box, and it didn't like it much.
SO, long story short - I did a vanilla install of a server environment RH6.1 and then follows the directions in the ../slinux/docs/INSTALL AWA linux magazine sept 2001 and barring a few hiccups from kernel make and apps make (I think it is just slghtly bad coding on their part - nothing fatal).

With a little configuring and more of RTFMing I was able to get a system up and running. If you decide to play complie in the avs auditing (access vector system), you can turn it on or off (audit and report or active denial) they put it in so you can view security manager calls to better configure the security policy.

WHat am I doing with it?? Welll, it's my master's thesis: Installing and configuring SELinux as a mail server. w00t, eh. The idea it to make a mial server inside a DMZ that cannot be affected by malicious code. I'm not too worried about sendmail configuration at this point, it is just proof of concept (hell, it's not even on the network). The test plan it to try to execute malicious code in an e-mail, simple, huh?

Anyhoo, I'll let you know how it goes.
-d

[X_console]

Ah thanks! I thought no one was ever going to reply to this post. :) I've been too busy to check LNO for the past few days.