Something is being done. GRSecurity has issues with the way it is being done. But, you can read the following and guess that whatever is being done will only work if the kernel gets locked down and fixes are made on it for the next few years. Students in advanced computer programs could test and probe it, while they are students of Linux, and over time, it will be fixed. Microsoft, on the other hand, can not do this because they have to sell a different model of car to their customers in order to get the money it needs.

Read this stuff:
http://www.schneier.com/book-sandl.html
http://www.securityfocus.com/infocus/1267
http://www.nsa.gov/selinux/
http://fedora.redhat.com/docs/selinux-faq-fc3/
http://www.grsecurity.net/lsm.php

--- this collective debate (open) is far more result based (vs the Microsoft solution where everything is hidden from view, and if their marketing could, would sweep under the carpet. Only by such articles and debate can we move forward. The article(s) are worth reading.



[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/296/30327#30327