> -----Original Message----- > From: IBM Mainframe Discussion List > [mailto:[email protected]] On Behalf Of Shmuel Metz (Seymour J.) > Sent: Monday, April 25, 2011 12:54 PM > To: [email protected] > Subject: Re: Fear the Internet, was Cool Things You Can Do in z/OS > > In <[email protected]>, > on 04/13/2011 > at 03:18 PM, "McKown, John" <[email protected]> said: > > >Try running Linux with the SELinux enhancements fully implemented. > >That makes Linux very difficult (to me) to break. SELinux implements > >MAC controls instead of DAC controls. > > ? > > The last I heard it added access control lists as a supplement to > normal *ix security and did not add mandatory access control. > > -- > Shmuel (Seymour J.) Metz, SysProg and JOAT
I may have misunderstood. I do find it confusing. But ACLs (Access Control Lists) work even if you don't have SELinux working. I use them all the time on Linux. http://www.nsa.gov/research/selinux/ <quote> The results of several previous research projects in this area have yielded a strong, flexible mandatory access control architecture called Flask. A reference implementation of this architecture was first integrated into a security-enhanced Linux(r) prototype system in order to demonstrate the value of flexible mandatory access controls and how such controls could be added to an operating system. The architecture has been subsequently mainstreamed into Linux and ported to several other systems, including the Solaris(tm) operating system, the FreeBSD(r) operating system, and the Darwin kernel, spawning a wide range of related work. </quote> -- John McKown Systems Engineer IV IT Administrative Services Group HealthMarkets(r) 9151 Boulevard 26 * N. Richland Hills * TX 76010 (817) 255-3225 phone * [email protected] * www.HealthMarkets.com Confidentiality Notice: This e-mail message may contain confidential or proprietary information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. HealthMarkets(r) is the brand name for products underwritten and issued by the insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance Company(r), Mid-West National Life Insurance Company of TennesseeSM and The MEGA Life and Health Insurance Company.SM ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
