3 ms·
Linux approach delegates security to the system administrator. Hence Linux provides containers, SELinux etc. focusing on securing the existing binaries. OpenBS
by _0w8t 4y ago
Linux approach delegates security to the system administrator. Hence Linux provides containers, SELinux etc. focusing on securing the existing binaries.
OpenBSD assumes it is the programmer who is responsible for delivering secure code. Hence it provides the tools that require to modify the sources.
One can argue for one or another approach, but both at the end deliver similar reduction of the attack surface.
- Zurrrrr 4y agoI think that is a flawed way of looking at it. Stuff like SELinux assumes the system administrator or software can't be trusted, and provides ways to protect against future attacks while enforcing only the minimal access needed. It isn't letting programmers off the hook, and isn't an alternate approach. Unless you can be absolutely certain of the code you are running, which no one really can, then it's the better approach.