4 ms·
I'm not sure how it helps here. User-level access in enough, isn't it?
by krick 6y ago
I'm not sure how it helps here. User-level access in enough, isn't it?
- Jkvngt 6y agoIt is.
- freeone3000 6y agoSELinux is more fine-grained than user-level access: it implements application-level access. Even if you, as a user, can access a file, an application working on your behalf cannot do so; same for launching applications.
- danieldk 6y agoIndeed, Russell Coker even has a public demo machine (I don't know if it still works) where anyone can log in as root/uid 0, and still can't do much useful due to the SELinux policies on the machine: https://www.coker.com.au/selinux/play.html https://www.coker.com.au/selinux/play.html