In response to Jeffrey Goldberg <[EMAIL PROTECTED]>:

> On Jun 16, 2008, at 7:21 AM, Bill Moran wrote:
> > Look at MAC and the bsdextended module (filesystem firewall):
> >
> >
> I've recently been looking at those myself, and while I think that I  
> have developed some limited understanding "in principle" about how MAC  
> works, I need a great deal more practical guidance.  Is there some  
> extended tutorial with cookbook or other resource that will actually  
> help someone who doesn't fully grok this work out a policy and rules  
> that will do more good than harm?

In my experience, there is a tremendous dearth of information on this
topic, and it's not much better on the Linux side where MAC is call
"SE Linux".

At this time, I think you're going to have to rely on your own
experimenting to fully understand how everything works.  Hopefully
that will improve with time.

Bill Moran
_______________________________________________ mailing list
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to