[CentOS] an actual hacked machine, in a preserved state

Les Mikesell lesmikesell at gmail.com
Tue Jan 3 06:41:26 UTC 2012


On Tue, Jan 3, 2012 at 12:23 AM, Bennett Haselton <bennett at peacefire.org> wrote:
>
> So I stand by the statement that SELinux is more likely to cause
> problems that are hard to figure out for people who aren't professional
> admins.

Don't think anyone claims otherwise.   Or that security is easy.

> And then there's the fact that solving a problem caused by iptables is
> usually trivial, while every problem caused by SELinux has a different
> solution.

Yes, but the system comes configured so the standard services work.
You only have to deal with changes you make to the system yourself or
for 3rd party apps that aren't packaged properly.

-- 
   Les Mikesell
     lesmikesell at gmail.com



More information about the CentOS mailing list