OSNews is Exploring the Future of Computing

Linked by Thom Holwerda on Wed 19th Mar 2008 22:58 UTC, submitted by diegocg

It's official: SELinux is now available in the Ubuntu development ('Hardy Heron') distribution. "This is the result of the amazing work of the ubuntu-security and ubuntu-hardened teams, as well as the huge contributions from the folks at Tresys (SELinux will not be the default, but is available as a security option)." In other news, Sun has started offering Ubuntu as an option.

3 31 Comment(s)

http://osne.ws/f1e

Permalink for comment 305811
To read all comments associated with this story, please click here.

RE[2]: Debian already has this?

by h3rman on Thu 20th Mar 2008 11:34 UTC in reply to "RE: Debian already has this?"

Member since:
2006-08-09

Even "disabled", it's still impacting performance unless you manually add "selinux=0" to your kernel boot string. SELinux is kind of like lice. Once your machine is infested, it's very difficult to really get rid of it.

I sense a little dichotomy here. If it's as simple as adding selinux=0 to your kernel boot string, where's the "very difficult" bit?
Not a rhetorical question, I frankly have no idea of kernel level SELinux mechanisms.

Reply Parent Bookmark Score: 2