4 ms·
Complexity is evil in security, and opt-in security generally doesn't work. SELinux is both complex and opt-in.
by api 10y ago
Complexity is evil in security, and opt-in security generally doesn't work. SELinux is both complex and opt-in.
- ybx 10y agoYou can make it enforce rules strictly over everything, rather than selectively enforce it on specific applications.
- throwaway2048 10y agono software is written with this in mind, so it wont work right without extensive babysitting (that nobody will do).
- andrey_utkin 10y agoSELinux is not opt-in in RedHat-based distros AFAIK.