2 ms·
An LSM such as SELinux, Tomoyo or AppArmor could mitigate this.
by w8rbt 10y ago
An LSM such as SELinux, Tomoyo or AppArmor could mitigate this.
- eikenberry 10y agoI was just researching these a little while ago and hadn't heard of Tomoyo. Turns out it is included in the mainline kernel and is pretty simple to use. http://tomoyo.osdn.jp/ http://tomoyo.osdn.jp/ On debian you just need to enable it via a kernel param and install tomoyo-tools to get going.
- w8rbt 10y agoI like Tomoyo better than any of the others. I find it the easiest to configure and reason about.