[PATCH] prose cleanup of SELinux discussion

Shawn Wells shawn at redhat.com
Tue Jun 12 04:56:10 UTC 2012


On 6/11/12 6:04 PM, Jeffrey Blank wrote:
> +Support for SELinux is provided out-of-the-box on RHEL. The default SELinux
> +policy included with RHEL, called<tt>targeted</tt>, should be usable with
> +minimal configuration and a small amount of system administrator training. This
> +policy prevents system services — including most of the common network-visible
> +services such as mail servers, ftp servers, and DNS servers — from accessing
> +files which those services have no valid reason to access. This action alone
> +can prevent serious damage from attacks which may compromise system services.
> +Creation and deployment of custom SELinux policies can allow satisfaction of
> +even stronger security goals, though this is generally done for systems that
> +fill specialized, security-critical roles instead of general purpose systems.

Ack. Had mailing list issues this afternoon, so this may be a duplicate ACK.

Also, it may be my mailreader (Thunderbird) but it looks like some 
special characters are in the above block of text


More information about the scap-security-guide mailing list