Is SELinux appropriate for my use?

[Tetsuji Maverick Rai <tetsuji.maverick.rai@gmail.com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

I'm considering SELinux on my Gentoo box, if it's worth installing.
My box is running apache2 with phpBB forum with mysql.   So only http
server is accessible from the Internet.   But I may begin to allow ssh
access.

I am dubious SELinux is necessary if I use only apache2 with phpBB and
other php based web applications.   Am I correct?   I am the only shell
user of the machine.

My understanding is SELinux is effective on a multi-user box.  Is it
effective when a hacker (cracker) tries to hack into my site using phpBB
or any other http based apps' vulnerabilities, executing his/her own
code?   Actually older version of phpBB had a vulnerability to run
arbitrary linux commands with apache permission.  If any such
vulnerability is found in the future, is SELinux effective?

Thanks in advance.

//tmr
- --
Tetsuji 'Maverick' Rai
Main http://maverick6664.bravehost.com/
Profile:
http://setiweb.ssl.berkeley.edu/beta/view_profile.php?userid=123
pubkey http://mav.atspace.com/tmr_at_gmail.txt
PGP Key ID: 82335CD9
Key fingerprint = 41CA 94B4 2A89 3FF1 5B11  BC37 D597 E667 8233 5CD9


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEagzo1ZfmZ4IzXNkRAjIQAKDgECZnlABxzdDtHrXEEOWrg9fUmQCePiFr
08es4ztBpMDMEw5/hIhqA4E=
=aEBY
-----END PGP SIGNATURE-----

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.