3 ms·
SELinux is more fine-grained than user-level access: it implements application-level access. Even if you, as a user, can access a file, an application working o
by freeone3000 6y ago
SELinux is more fine-grained than user-level access: it implements application-level access. Even if you, as a user, can access a file, an application working on your behalf cannot do so; same for launching applications.
- danieldk 6y agoIndeed, Russell Coker even has a public demo machine (I don't know if it still works) where anyone can log in as root/uid 0, and still can't do much useful due to the SELinux policies on the machine: https://www.coker.com.au/selinux/play.html https://www.coker.com.au/selinux/play.html