3 ms·
This seems analogous, in principle, to a system with fully utilized role-based access control - like security-enhanced linux or similar - although easier to gr
by dedward 17y ago
This seems analogous, in principle, to a system with fully utilized role-based access control - like security-enhanced linux or similar - although easier to grok perhaps?
Is there a fundamental difference? (I understand the technical difference - I'm asking more in terms of semantics - what makes this a better security model?)
- hga 17y agoI think the granularity is so different that it's a difference in kind. And the granularity is at a very high level; I gather few want to wade into the details of SELinux, and if I hadn't been exposed to the concepts for 30 years (sic, I started learning Multics in 1979) I probably would have just turned off SELinux when I was using Fedora last year.