4 ms·

Does anybody knowledgeable know how hard would it be to patch the same linux kernel with per-application permissions? I know there is some 'OS' doing it but I a

by fxfan 8y ago

Does anybody knowledgeable know how hard would it be to patch the same linux kernel with per-application permissions? I know there is some 'OS' doing it but I am looking for a WSL like solution- 'patch' the existing kernel so I can run the binaries et al unmodified. There would be a permissioning matrix where I can list allow-all-permissions and deny-all-permissions by default and then change the granularity

walterbell 8y ago
Subgraph might be a starting point, https://subgraph.com/sgos/hardening/index.en.html https://subgraph.com/sgos/hardening/index.en.html
viraptor 8y ago
That sounds like selinux / apparmor / rbac. (Or alternatively I don't understand what you mean by "patch Linux kernel with per-app permissions")
- fxfan 8y ago
  You understood exactly and apparmor clearly fits what I need (and possibly the other two too but I haven't had time to look...). I used to (incorrectly) believe that SELinux only dealt with networking...