Re: NSA software in Debian
> SELinux security benefits are vague because it makes possible to
> use it's hooks to add a backdoor which would be nearly impossible
> to detect:
SELinux, AppArmor, Smack and Tomoyo are using the Linux Security
Module (LSM) framework.
I am aware of the claims made by grsecurity regarding LSM, but I do
not agree with several of them.
> Consider alternatives like PaX/grsecurity and RSBAC.
Both seem to be compatible with SELinux.