Hi!
On Mon, 2012-02-13 at 14:30 +0530, bharat dhaker wrote:
[...]
> I want to know the differences between ACLs and SElinux. Does anyone know
> which file-systems supports SElinux?
Google knows;-)
Actually you make a small partition for each filesystem and try it out.
Bernd
--
Bernd Petrovitsch Email : [email protected]
LUGA : http://www.luga.at
On 2/13/2012 1:10 AM, Bernd Petrovitsch wrote:
> Hi!
>
> On Mon, 2012-02-13 at 14:30 +0530, bharat dhaker wrote:
> [...]
>> I want to know the differences between ACLs and SElinux.
The differences are many:
ACLs are an extension of the standard Linux Discretionary
Access Control (DAC) mechanism. SELinux is a supplemental
Mandatory Access Control (MAC) scheme.
ACLs are based on the withdrawn POSIX P1003.1e/2c DRAFT
Standard and reflects a rough consensus of the industries
Unix security experts of its day. SELinux started out as
the Flask micro-kernel security architecture.
ACLs are part of the base kernel, while SELinux is a
Linux Security Module.
>> Does anyone know
>> which file-systems supports SElinux?
It's really much more the other way around. SELinux
uses extended attributes (xattrs) and can take advantage
of any filesystem that supports them.
> Google knows;-)
>
> Actually you make a small partition for each filesystem and try it out.
>
> Bernd