On Tue, Jul 05, 2005 at 09:52:51PM +0200, Fabian Steiner wrote: > * What's the difference between GrSecurity und SELinux? There are both > in der kernel - so may one use both of them at the same time? > > * Moreover, there are two different portage profiles available - > hardened and selinux. When do I have to use them?
Go ahead and read thru: http://www.gentoo.org/proj/en/hardened/hardenedfaq.xml If you have not already, this can answer your questions better and provides links to the "sub-projects" homepages so you can evaluate what/which options you would like to implement. Most likely you read this and saw that it pointed you here. :) Grsec is a series of kernel patches that include PaX and grsec's own role based access control. I choose to use these as they are what brought me to hardended-gentoo in the first place as I manually patched and used them in the past. As far as the profiles go, use HARDENED for grsec and then (by exclusion) I can only assume that one would use SELINUX for SELinux. You can intermingle the two "systems" as they are a series of kernel patches and configurations, but you have to choose one access control system, so people seem to tend towards using grsec with pax (hardened) and/or SELinux with RSBAC I believe. I have not personally used SElinux and RSBAC so others will have to comment on this. http://www.nsa.gov/selinux/info/faq.cfm http://www.rsbac.org/why It seems it's a bit more popular here and looks to have a pretty large community outside of just gentoo. So your support and help options may be greater there, dunno. -- Dave -- [email protected] mailing list
