Top NSA Banner

• Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ]

• This message: [ Message body ]
• Next message: Dale Amon: "Re: RBAC/Types Hierarchy"
• Previous message: John Scroggins: "Re: RBAC/Types Hierarchy"
• Next in thread: Jose Nazario: "Re: selinux on freebsd"
• Reply: Jose Nazario: "Re: selinux on freebsd"
• Reply: Stephen Smalley: "Re: selinux on freebsd"

Hello,

I just joined the selinux list. I am building a unix based firewall. I have a few questions:

1. Would linux work best as a secured server (for http, ftp, mail, etc), as a gateway, or does it work fine as either?
2. I read in the FAQ that selinux can be installed on an existing linux install. Can it be installed on a Freebsd system with linux compatibility? Is anyone working on a port for freebsd or openbsd?

Conan

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

• This message: [ Message body ]
• Next message: Stephen Smalley: "Re: selinux on freebsd"
• Previous message: Dale Amon: "Re: RBAC/Types Hierarchy"
• In reply to: Conan Callen: "selinux on freebsd"
• Next in thread: Stephen Smalley: "Re: selinux on freebsd"

On Wed, 15 Aug 2001, Conan Callen wrote:

> 2. I read in the FAQ that selinux can be installed on an existing
> linux install. Can it be installed on a Freebsd system with linux
> compatibility? Is anyone working on a port for freebsd or openbsd?

no. its massive kernel changes, things that emulation ont matter at all about. for freebsd look into the trustedbsd project, http://www.trustedbsd.org/ ... for openbsd look into stephanie, http://www.packetfactory.net/Projects/Stephanie ....

trusted bsd is an attempt to being MACs, audit trails, etc ... to FreeBSD. stephanie is an attempt to improve the security of openbsd, though it doesn't approach orange book type matters.

hope this helps

jose nazario						     jose@cwru.edu
	      	     PGP: 89 B0 81 DA 5B FD 7E 00  99 C3 B2 CD 48 A0 07 80
				       PGP key ID 0xFD37F4E5 (pgp.mit.edu)

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

• This message: [ Message body ]
• Next message: John Scroggins: "Re: RBAC/Types Hierarchy"
• Previous message: Jose Nazario: "Re: selinux on freebsd"
• In reply to: Conan Callen: "selinux on freebsd"

On Wed, 15 Aug 2001, Conan Callen wrote:

> 2. I read in the FAQ that selinux can be installed on an existing linux
> install. Can it be installed on a Freebsd system with linux
> compatibility? Is anyone working on a port for freebsd or openbsd?

SELinux is an implementation of flexible, fine-grained nondiscretionary access controls for the Linux kernel. The FAQ doesn't mean that you run SELinux on top of the Linux kernel as an application - it means that you install the SELinux kernel on an existing Linux platform and then boot that kernel.

The TrustedBSD project (www.trustedbsd.org) and the CBOSS project (http://opensource.nailabs.com/initiatives/cboss) are developing similar features for FreeBSD.

--
Stephen D. Smalley, NAI Labs
ssmalley@nai.com







--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

• Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ]