[Wolves] Two Things

[Shane M. Coughlan]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Simon Morris wrote:
> Surely everyone now knows that AppArmor is the path to true application
> firewall nirvana? not SELinux?

Crispin Cowan: “Simplicity is the soul of security…SELinux seems to have
been designed to meet the NSA’s desire for arbitrarily complex policy at
the expense of usability…AppArmor was designed for usability – to meet
the needs of most Linux users.”

Hm.

*ahem* Sometimes security is not simple.

Imagine if we can make SELinux policies simple.  Then we'd have
fine-grained control without need PhDs in Obtuse Securification Methodology.

Shane

- --
Shane Martin Coughlan
e: shane at opendawn.com
m: +447773180107 (UK) +353862262570 (Ire)
w: www.opendawn.com
- ---
OpenPGP: http://www.opendawn.com/shane/publickey.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iQCVAwUBRLOfIdwG3M95JPpzAQhdwAQAmM3TJd7kSvywsYk1oHaBGDkZuytFK+kr
3hxxqoou7TjKL+uU0nWrYuJavCnxDUpFXS+EBKlSW+KcIutXLHAs5u4lL0NdkUvk
jqTQZPPox3a6Zv0eZGS2YELygVl9AyIBjZzVb8S4Sco2wRVlrFOMTufG8S4VwyeL
lR2zX91XYkA=
=/hmk
-----END PGP SIGNATURE-----