3 ms·
It's a great mechanism in practice, it just has a bad rep because too many were scared by the complexity.
by DEADMINCE 3y ago
It's a great mechanism in practice, it just has a bad rep because too many were scared by the complexity.
- kbolino 3y agoThe complexity is a self-inflicted problem. This is a rake that many computer security people refuse to stop stepping on. If it's not usable then it doesn't work. FWIW it does look like Gentoo stepped up and filled in the gaps since I last looked. Their Wiki has good docs starting from https://wiki.gentoo.org/wiki/SELinux https://wiki.gentoo.org/wiki/SELinux.