Russell Coker has done some work on SELinux. He's had a Linux box online since 2008 or so that users may ssh into as root. It's really amazing to see what SELin

Russell Coker has done some work on SELinux. He's had a Linux box online since 2008 or so that users may ssh into as root. It's really amazing to see what SELinux can do. However, I agree that OpenBSD's focus on small and simple is the better approach. https://www.coker.com.au/selinux/ https://www.coker.com.au/selinux/ https://www.coker.com.au/selinux/play.html https://www.coker.com.au/selinux/play.html