On Wed, 05 May 2004 15:48:29 -0400 Stephen Smalley wrote:
> In any case, a diagnostic-free run of 'fixfiles relabel' using a
> programmatically checked set of policy files should result in a pretty
> secure system. Yes?
Hmm...well, an operating system that enforces your security goals, to
the extent that implementation is correct and underlying assumptions are
met ;) It certainly raises the bar in security.
Yes indeed, SEL certainly does raise the bar in security.