Posted by: Administrator
on March 21, 2007 10:13 PM
Even if you are on a trusted network, SELinux's security contexts can still help protect against worms, trojans, and other malware. Insecure programming may leave attack vectors open in the services themselves (Apache, MySQL, CGI), and few, if any, firewalls will protect against bad programming. SELinux defines which files are accessible by which tasks, on the system itself, independently of the network and firewall.
At least, that's my understanding. I'm sure someone will correct me if I'm wrong.
Why disable SELinux?
Posted by: Administrator on March 21, 2007 10:13 PMAt least, that's my understanding. I'm sure someone will correct me if I'm wrong.
#