Research
.
Skip Search Box

SELinux Mailing List

Re: Updated SELinux Release

From: Stephen Smalley <sds_at_epoch.ncsc.mil>
Date: Fri, 05 Nov 2004 07:29:18 -0500


On Thu, 2004-11-04 at 23:06, Colin Walters wrote:
> Why don't we just run say EROS (http://www.eros-
> os.org/) instead? A: Because what makes SELinux interesting is that it
> can run all of our legacy software. By not shipping it on everywhere,
> we're not tapping that ability.

Some of us might argue that the EROS security model is inadequate... See DTMach/DTOS/Flask papers and reports for discussion of why capability-based models leave something to be desired. 

-- 
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
Received on Fri 5 Nov 2004 - 07:34:19 EST
 

Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009

  
bottom
National Security Agency / Central Security Service