From: sven.j.vermeulen@gmail.com (Sven Vermeulen)
Date: Thu, 8 Dec 2016 19:01:17 +0100
Subject: [refpolicy] SELinux and IMA
In-Reply-To: <67130EC7AFA3FE4E9290B03665B351F407E5CE@SE-EX021.groupinfra.com>
References: <67130EC7AFA3FE4E9290B03665B351F407E5CE@SE-EX021.groupinfra.com>
Message-ID: <CAPzO=NziTBMLv3LaEqYzO4Sr2nc1DN7Z+8q+G2oiPaEgi1Go1A@mail.gmail.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

You can use IMA and SELinux together perfectly. With EVM you can even
protect SELinux attributes from being tampered with. The documentation
surrounding IMA/EVM is limited though.

On Dec 6, 2016 11:50 PM, "Fakim, Walid via refpolicy" <
refpolicy@oss.tresys.com> wrote:

> Hi Guys,
>
>
>
> Does anyone here have experience of using both SELinux & Integrity
> Measurement Architecture (IMA) on a target system? From my online reading,
> they perform different functions and achieve different security goals ? how
> do they perform when used together?
>
>
>
> Would be great to hear anyone?s experience, good or bad.
>
>
>
> Thanks.
>
>
>
> Best Regards,
>
>
>
> Walid Fakim
>
>
>
> _______________________________________________
> refpolicy mailing list
> refpolicy at oss.tresys.com
> http://oss.tresys.com/mailman/listinfo/refpolicy
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://oss.tresys.com/pipermail/refpolicy/attachments/20161208/190b8485/attachment.html