Ravi writes "SELinux is a project started and actively
maintained by the U.S Department of Defense to provide a
Mandatory Access Controls mechanism in Linux. It had been a long
standing grouse of Linux power users and system administrators
over its lack of fine grained access control over various
running processes as well as files in Linux. While Solaris touts
its famous RBAC and Microsoft Windows has its own way of
providing finer rights to its resources, Linux had to put up
with the simple but crude user rights known in tech speak as
discretionary access control to control user access of files.
With SELinux project making great strides and now being bundled
with many major Linux distributions, it is possible to
effectively lock down a Linux system through judicious use of
SELinux policies. SELinux implements a more flexible form of MAC
called type enforcement and an optional form of multilevel
security." Read the rest of Ravi's review. |SELinux by Example|
|author||Frank Mayer, David Caplan, Karl MacMillan|