Re: [CentOS] selinux stuff - I just don't get

On Mon, 2005-11-14 at 08:29, Jim Perrin wrote:

...

Selinux just adds bloat that we've managed without for many many years.

We used to manage just fine with telnet for many many years also, and these days I wouldn't think of running accessing a machine via telnet. If you don't change with the times, you're going to get steamrolled by them.

But note that there have been times that having ssh enabled exposed your system to additional exploits.

Another layer of complexity to allow another layer of

...

holes/backdoors/exploits.

Given the organization who gave us selinux and their dire need for security, I get the feeling it'll block many more problems that it allows, just as ssh did.

Except for the versions of ssh that allowed exploits...