From: Bill McCarty <bmccarty_at_pt-net.net>
Date: Mon, 05 Apr 2004 15:57:17 -0700

Hi all,

Hmm, not that I lack confidence in the security enhancements provided by SELinux. But, I think I'd more likely use an SELinux logo on systems that **aren't** protected by SELinux <g>. For systems that really do run SELinux, I'd prefer that would-be attackers be unaware of what they're up against. A dash of security through obscurity is sometimes useful, in my view, so long as it's not the primary defensive measure. Anyone who thinks otherwise is welcome to send me his or her ATM PIN code <g>.

But, I run honeypots adjacent to my production servers. So, I may be a bit more paranoid about my production servers than most folks <g>.

Cheers,

---

Bill McCarty, Ph.D.
Professor of Information Technology
Azusa Pacific University

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Received on Mon 5 Apr 2004 - 18:57:49 EDT