Re: [ISN] Super-Secure Linux, Inch by Inch

From: InfoSec News (isnat_private)
Date: Thu Jun 13 2002 - 00:45:59 PDT

  • Next message: InfoSec News: "[ISN] Credit-card hackers stung with bogus IIS 'sploit"

    Forwarded from: Russell Coker <russellat_private>
    Cc: rzarateat_private
    
    On Wed, 12 Jun 2002 10:02, you wrote:
    > http://www.wired.com/news/linux/0,1411,53004,00.html
    >
    > By Declan McCullagh and Robert Zarate
    > 2:00 a.m. June 11, 2002 PDT
    >
    > Part one of a three-part series.
    >
    > WASHINGTON -- Super-secure additions to the Linux operating system
    > are inching closer to the mainstream.
    >
    > Savage says: "Unless you know security, it's very difficult. Unless
    > you've ever worked in multi-level security, I'd say don't even
    > attempt to incorporate because of the terminology it uses. To most
    > people it's gobbledygook. Most people can't understand it. If you
    > don't know about security, it's not a good thing to learn."
    
    The NSA guys generally recommend not using MLS, and it's marked as
    experimental in the kernel patch.
    
    > A Red Hat version of SELinux is available at sourceforge.net.
    
    RPM packages for some parts of SE Linux are available from 
    http://sourceforge.net/projects/selinux/ .  Debian packages for much more of 
    SE Linux are available from the Debian site and from my site 
    http://www.coker.com.au/selinux/ .
    
    
    Russell Coker
    
    
    
    -
    ISN is currently hosted by Attrition.org
    
    To unsubscribe email majordomoat_private with 'unsubscribe isn'
    in the BODY of the mail.
    



    This archive was generated by hypermail 2b30 : Thu Jun 13 2002 - 03:36:41 PDT