On 6/11/12 6:04 PM, Jeffrey Blank wrote:
+Support for SELinux is provided out-of-the-box on RHEL. The default
SELinux
+policy included with RHEL, called<tt>targeted</tt>, should be usable with
+minimal configuration and a small amount of system administrator training. This
+policy prevents system services — including most of the common network-visible
+services such as mail servers, ftp servers, and DNS servers — from accessing
+files which those services have no valid reason to access. This action alone
+can prevent serious damage from attacks which may compromise system services.
+Creation and deployment of custom SELinux policies can allow satisfaction of
+even stronger security goals, though this is generally done for systems that
+fill specialized, security-critical roles instead of general purpose systems.
Ack. Had mailing list issues this afternoon, so this may be a duplicate ACK.
Also, it may be my mailreader (Thunderbird) but it looks like some
special characters are in the above block of text