4 ms·

Not much in the realm of Linux, to be honest. You'd probably get more security maintaining a SELinux setup on your system and running a hardened kernel.

• granda 9y ago
  Do you have any reference material that goes more in depth?
• majewsky 9y ago
  That's a different concern, though. Or does SELinux allow you to specify "process X may speak to domain Y with HTTP, but not to any other domains"?