Michael Dolan Dot Com

Wednesday, February 27th, 2008

SELinux really does work as intended (and mitigates casualties)

Just saw this interesting update on some of the real world successes of SELinux.

Linux security experts are reporting a growing list of real-world security situations in which the US National Security Agency’s SELinux security framework contains the damage resulting from a flaw in other software. These so-called “mitigations” are showing that a Linux feature that began as an esoteric security measure is starting to prove its worth.

The article also references Dan Walsh’s LiveJournal entry here.