Desktop platforms Toolkit

Story: Red Hat readies Enterprise Linux 4

• 
• 

Strange, the article states states that SELinux canät protect you from misbehving applications runnig as root. I wonder what Red Hat have done to get that behavior. Normally iin SELinux it doesn't matter what user you are, the security policy is everything. E.g if I have some kind of sofware that misbehaves in a way that it elevates iits priviledges too root SELinux would kick in and I would only run the default security role for root. By haming very few privileges in that securyty role such problems could be avoided.

There is of course notheng to prevent harmful things in some roles of root. But that would normally require some user intervention like typeing a password.

There is of corse the risk that SELinux in it self gets hacked, but that is a separate sysem from the normal Linux permissions, so I you would probably need tow hacks to manage that.

Either the auther doesn't understand the info on the Red Hat site, or they have configured it extremely stupid by default.

• 
• 

• 
• 
• 

Full Talkback thread