Although SELinux does not provide a true reference monitor, it does give some advantages when used to compartmentalize the system. In some cases, it can remove path to root without removing root priveleges. Unforunately, as was mentioned, it is a module on a monolithic kernel, which certainly does not give the security of a reference monitor on a microkernel.Originally Posted by crusader100




Reply With Quote