Debian 8. I find Tomoyo to be the most usable of the LSMs. You can be up and running in a few days with rather complex policies. I could not get Chrome to work

Debian 8. I find Tomoyo to be the most usable of the LSMs. You can be up and running in a few days with rather complex policies. I could not get Chrome to work with it. It just reads and writes all over the place in ways that are hard to manage. No bugs yet.