3 captures
07 Sep 2008 - 11 Jan 2024
Sep OCT Nov
09
2014 2015 2016
success
fail

About this capture

COLLECTED BY

Organization: Internet Archive

The Internet Archive discovers and captures web pages through many different web crawls. At any given time several distinct crawls are running, some for months, and some every day or longer. View the web archive through the Wayback Machine.

Collection: Wide Crawl Number 13

Web Wide Crawl Number 13
TIMESTAMPS

The Wayback Machine - http://web.archive.org/web/20151009174119/http://lwn.net/Articles/153843/
 
LWN.net Logo

Log in now

Create an account

Subscribe to LWN

LWN.net Weekly Edition for October 8, 2015

Status updates for three graphics drivers

strscpy() and the hazards of improved interfaces

LWN.net Weekly Edition for October 1, 2015

Compile-time stack validation

Easier than SELinux

Easier than SELinux

Posted Sep 30, 2005 7:51 UTC (Fri) by skarkkai (subscriber, #4128)
Parent article: Rule set based access control

I have used RSBAC in past, and I find it vastly easier to use than SELinux. SELinux has the major advantage of being in the standard kernel and especially, for Redhat/Fedora users, being configured to work out of box with those distributions. However if you need serious security and will be changing the configuration of your systems any significant amount, you will also need to be making changes to the security system configuration, be it SELinux or RSBAC. In such a situation, the easier configurability of RSBAC could be very important.

When it comes to features and achieveable level of security, I'd be inclined to say RSBAC has the upper hand, but I don't remember the details well enough to say anything much concrete about this.

I think it's unfortunate that the LSM framework is the one security framework accepted into the standard kernel. I find Amon Ott's arguments about why RSBAC can't work with LSM concinving, and it's sad that RSBAC, a very high quality, well maintained secury system, is effectively kept out of the standard kernel forever for this reason.


(Log in to post comments)


Copyright © 2015, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds