3 ms·
I'm not trying to hate on SELinux, it's great stuff, for what it is. I'm not trying to hate on you either, though clearly you seem to have hatred towards me, w
by zie 5y ago
I'm not trying to hate on SELinux, it's great stuff, for what it is. I'm not trying to hate on you either, though clearly you seem to have hatred towards me, which is just sad.
I'm happy to accept that SELinux is now built-in to Linux, the kernel parts do indeed seem to be built in now, news to me, thanks for that. I don't follow Linux kernel stuff much anymore, I haven't contributed to Linux in over a decade.
You seem to assume SELinux is the end-all be all of Linux security. It isn't. I recognize, based on your other comment, that you are fairly new to the field(a whole decade, go you!). Please open your mind and accept differing perspectives, it will do wonders for your ability to reason about security properly.
HardenedBSD[0] essentially implements grsecurity for FreeBSD, plus FreeBSD has built-in capabilities with Capsicum[1], which is true capability based security, which is much different than SELinux's MAC stuff. If you don't believe me, go read the capsicum paper[1] and come to your own conclusions, it might prove enlightening.
Also, see CheriBSD. :)
0: https://hardenedbsd.org/content/easy-feature-comparison https://hardenedbsd.org/content/easy-feature-comparison
1: https://papers.freebsd.org/2010/rwatson-capsicum/ https://papers.freebsd.org/2010/rwatson-capsicum/
If you just want to continue hating on me, no reason to respond, we can go our separate ways. If you want to have a reasoned discussion about security, then I'm happy to continue.
- YATA0 5y ago>You seem to assume SELinux is the end-all be all of Linux security. Never said or implied anything of the sort. >I recognize, based on your other comment, that you are fairly new to the field(a whole decade, go you!). I've been implementing secure, hardened UNIX and Linux probably longer than you've been alive. I just specifically worked on DoD TS+ systems for a decade. The rest of your Gish gallop is nonsense. Linux also has capability based security ON TOP of all the other aspects of security, SELinux included. >If you want to have a reasoned discussion about security That's not possible with you. You instantly showed how little you know about security in general when you flouted your lack of SELinux knowledge, then you proceeded to Gish gallop and sealion because you've been called out. Stop it.
- zie 5y agoIf this is how you interact with people in the real world, I feel sorry for them. Grow up and interact with humanity better.
- YATA0 5y ago>If this is how you interact with people in the real world, I feel sorry for them. IMAX-levle projection. The only one here you should feel sorry for is yourself. > Grow up and interact with humanity better. "no u". Grow up and take the L with grace.
- skeptical1 5y agoMaybe he's just tired of people who offer ignorant opinions and argue based on conjecture and not actual knowledge.
- YATA0 5y agoDING DING DING DING DING
- ybloviator 5y agoAnd they say BSD users have attitude issues, lol.
- YATA0 5y agoI also use BSD, AIX, Solaris, etc. As someone stated below, maybe I'm "just tired of people who offer ignorant opinions and argue based on conjecture and not actual knowledge."