[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: NSA software in Debian



On 19 Jan 2014 12:16:25 +0100
"Andreas Kuckartz" <a.kuckartz@ping.de> wrote:

> Bjoern Meier:
> > http://en.wikipedia.org/wiki/Security-Enhanced_Linux
> 
> I proposed this Debian Release Goal:
> https://wiki.debian.org/ReleaseGoals/SELinux
> 
> Cheers,
> Andreas
> 
> 

SELinux security benefits are vague because it makes possible to use
it's hooks to add a backdoor which would be nearly impossible to detect:

https://www.rsbac.org/documentation/why_rsbac_does_not_use_lsm
https://grsecurity.net/lsm.php

Consider alternatives like PaX/grsecurity and RSBAC.

-- 
Education is a process of making people see what is advanced and not
obvious, but also not seeing what is basic and obvious.

http://markorandjelovic.hopto.org

Attachment: signature.asc
Description: PGP signature


Reply to: