| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <4F395313.5030704@schaufler-ca.com> Date: Mon, 13 Feb 2012 10:14:43 -0800 From: Casey Schaufler <casey@...aufler-ca.com> To: Bernd Petrovitsch <bernd@...rovitsch.priv.at> CC: bharat dhaker <bharat4u.u@...il.com>, linux-kernel@...r.kernel.org, kernelnewbies@...nelnewbies.org, "linux-security-module@...r.kernel.org" <linux-security-module@...r.kernel.org> Subject: Re: difference between ACLs and SElinux On 2/13/2012 1:10 AM, Bernd Petrovitsch wrote: > Hi! > > On Mon, 2012-02-13 at 14:30 +0530, bharat dhaker wrote: > [...] >> I want to know the differences between ACLs and SElinux. The differences are many: ACLs are an extension of the standard Linux Discretionary Access Control (DAC) mechanism. SELinux is a supplemental Mandatory Access Control (MAC) scheme. ACLs are based on the withdrawn POSIX P1003.1e/2c DRAFT Standard and reflects a rough consensus of the industries Unix security experts of its day. SELinux started out as the Flask micro-kernel security architecture. ACLs are part of the base kernel, while SELinux is a Linux Security Module. >> Does anyone know >> which file-systems supports SElinux? It's really much more the other way around. SELinux uses extended attributes (xattrs) and can take advantage of any filesystem that supports them. > Google knows;-) > > Actually you make a small partition for each filesystem and try it out. > > Bernd -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists