On Fri, Mar 12, 2004 at 04:03:34PM -0800, Crispin Cowan wrote: > Jose Nazario wrote: > > >SELinux. LIDS. systrace (Linux, BSD, MacOS X). a few things on FreeBSD i > >can't recall. > > > SubDomain predates all of these except for SELinux (which has roots that > go back nearly 20 years) and LIDS got design elements from SubDomain.
How does SubDomain compare to SELinux, systrace, etc? What are the strengths and weaknesses of each? Does any distribution besides Immunix use SubDomain? What percentage of applications have SubDomain policies written for them? I imagine it's a lot of work to write these policies. I also wonder if a SubDomain policy could be translated into an SELinux rule set automatically. Thanks, - Jared
