OSNews: http://www.osnews.com/story/20109/Security_Is_No_Secret Exploring the Future of Computing en-us Copyright 2001-2009, David Adams adam+nospam@osnews.com Tue, 10 Nov 2009 05:10:24 GMT http://www.osnews.com/images/osnews.gif OSNews.com http://www.osnews.com Last line of defense? http://osnews.com/thread?324376 http://osnews.com/thread?324376 Mine is the power button ;) Thu, 24 Jul 2008 18:03:00 GMT donotreply@osnews.com (umccullough) Comments ahah http://osnews.com/thread?324378 http://osnews.com/thread?324378 And what does most(all?) wannabe system administrators? THEY TURN SELINUX OFF! Why, you ask? Because it's PITA to configure and slows your system down to knees. That's why.

It is amusing to read every single day about critical bugs in serious applications. Maybe it is not a fault of programmers but serious design faults in compilers itself- it should stop compiling your shitty code and send a message to authorities about your stupidity.

Whatever. Thu, 24 Jul 2008 18:16:00 GMT donotreply@osnews.com (antik) Comments RE: ahah http://osnews.com/thread?324391 http://osnews.com/thread?324391
And what does most(all?) wannabe system administrators? THEY TURN SELINUX OFF!


SELinux or not, I would certainly not hire a "wannabe system administrator" nor trust his security decisions. Thu, 24 Jul 2008 19:28:00 GMT donotreply@osnews.com (ichi) Comments I wouldn't trust anything from the NSA... http://osnews.com/thread?324401 http://osnews.com/thread?324401 ...until every single line of code had been independently verified to not provide a back door for the NSA to spy on the data. While the FBI and CIA have done their share of foul stuff, the NSA probably takes the cake in terms of sheer evilness over the last 10 years or so. Thu, 24 Jul 2008 21:07:00 GMT donotreply@osnews.com (madcrow) Comments RE: I wouldn't trust anything from the NSA... http://osnews.com/thread?324404 http://osnews.com/thread?324404 "...until every single line of code had been independently verified to not provide a back door for the NSA to spy on the data. While the FBI and CIA have done their share of foul stuff, the NSA probably takes the cake in terms of sheer evilness over the last 10 years or so."

Help yourself. SELinux is under the GPL and the code is available. Thu, 24 Jul 2008 21:45:00 GMT donotreply@osnews.com (DrillSgt) Comments RE: I wouldn't trust anything from the NSA... http://osnews.com/thread?324413 http://osnews.com/thread?324413 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=... Thu, 24 Jul 2008 22:14:00 GMT donotreply@osnews.com (diegocg) Comments RHEL & Fedora http://osnews.com/thread?324682 http://osnews.com/thread?324682 In RHEL and Fedora by default SELinux is 'on' if you leave it on and you are setting up a machine, server, laptop you can use this command.

setenforce 0 to set it to permissive so you can install the packages or updates...

When you are finished customizing your machine
setenforce 1 to turn it back to enforcing mode no reboot is required.

You can reference another directory with the same SELinux context with chcon --reference /var/www/html /var/www/mywebstuff

It is another area that is amazing in what it can do, it takes a lot of practice, studying and understanding to administer it in the correct manner. Sat, 26 Jul 2008 15:17:00 GMT donotreply@osnews.com (RHCE07) Comments