All of lore.kernel.org
 help / color / mirror / Atom feed
* difference between ACLs and SElinux
@ 2012-02-13  9:00 bharat dhaker
  2012-02-13  9:10   ` Bernd Petrovitsch
  0 siblings, 1 reply; 4+ messages in thread
From: bharat dhaker @ 2012-02-13  9:00 UTC (permalink / raw)
  To: kernelnewbies

Hi all,

I want to know the differences between ACLs and SElinux. Does anyone know
which file-systems supports SElinux?


-- 
Bharat Dhaker
Senior Software Engineer
Memory Solutions Group
Samsung India Software Operations, Bangalore
Phone- 7676390877
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.kernelnewbies.org/pipermail/kernelnewbies/attachments/20120213/6d89f844/attachment.html 

^ permalink raw reply	[flat|nested] 4+ messages in thread

* difference between ACLs and SElinux
  2012-02-13  9:00 difference between ACLs and SElinux bharat dhaker
@ 2012-02-13  9:10   ` Bernd Petrovitsch
  0 siblings, 0 replies; 4+ messages in thread
From: Bernd Petrovitsch @ 2012-02-13  9:10 UTC (permalink / raw)
  To: kernelnewbies

Hi!

On Mon, 2012-02-13 at 14:30 +0530, bharat dhaker wrote:
[...]
> I want to know the differences between ACLs and SElinux. Does anyone know
> which file-systems supports SElinux?

Google knows;-)

Actually you make a small partition for each filesystem and try it out.

	Bernd
-- 
Bernd Petrovitsch                  Email : bernd at petrovitsch.priv.at
                     LUGA : http://www.luga.at

^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: difference between ACLs and SElinux
@ 2012-02-13  9:10   ` Bernd Petrovitsch
  0 siblings, 0 replies; 4+ messages in thread
From: Bernd Petrovitsch @ 2012-02-13  9:10 UTC (permalink / raw)
  To: bharat dhaker; +Cc: linux-kernel, kernelnewbies

Hi!

On Mon, 2012-02-13 at 14:30 +0530, bharat dhaker wrote:
[...]
> I want to know the differences between ACLs and SElinux. Does anyone know
> which file-systems supports SElinux?

Google knows;-)

Actually you make a small partition for each filesystem and try it out.

	Bernd
-- 
Bernd Petrovitsch                  Email : bernd@petrovitsch.priv.at
                     LUGA : http://www.luga.at


^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: difference between ACLs and SElinux
  2012-02-13  9:10   ` Bernd Petrovitsch
  (?)
@ 2012-02-13 18:14   ` Casey Schaufler
  -1 siblings, 0 replies; 4+ messages in thread
From: Casey Schaufler @ 2012-02-13 18:14 UTC (permalink / raw)
  To: Bernd Petrovitsch
  Cc: bharat dhaker, linux-kernel, kernelnewbies,
	linux-security-module@vger.kernel.org

On 2/13/2012 1:10 AM, Bernd Petrovitsch wrote:
> Hi!
>
> On Mon, 2012-02-13 at 14:30 +0530, bharat dhaker wrote:
> [...]
>> I want to know the differences between ACLs and SElinux.

The differences are many:

ACLs are an extension of the standard Linux Discretionary
Access Control (DAC) mechanism. SELinux is a supplemental
Mandatory Access Control (MAC) scheme.

ACLs are based on the withdrawn POSIX P1003.1e/2c DRAFT
Standard and reflects a rough consensus of the industries
Unix security experts of its day. SELinux started out as
the Flask micro-kernel security architecture.

ACLs are part of the base kernel, while SELinux is a
Linux Security Module.


>> Does anyone know
>> which file-systems supports SElinux?

It's really much more the other way around. SELinux
uses extended attributes (xattrs) and can take advantage
of any filesystem that supports them.

> Google knows;-)
>
> Actually you make a small partition for each filesystem and try it out.
>
> 	Bernd


^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2012-02-13 18:14 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2012-02-13  9:00 difference between ACLs and SElinux bharat dhaker
2012-02-13  9:10 ` Bernd Petrovitsch
2012-02-13  9:10   ` Bernd Petrovitsch
2012-02-13 18:14   ` Casey Schaufler

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.