From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from goalie.tycho.ncsc.mil (goalie [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id sBJJsfSQ000509 for ; Fri, 19 Dec 2014 14:54:41 -0500 Message-ID: <54948279.2030601@redhat.com> Date: Fri, 19 Dec 2014 14:54:33 -0500 From: Daniel J Walsh MIME-Version: 1.0 To: eric gisse Subject: Re: Some of our customers are looking to turn on SELinux but they also want to use CSP from Symantec References: <54945543.7090706@redhat.com> In-Reply-To: Content-Type: text/plain; charset=windows-1252 Cc: SELinux List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: On 12/19/2014 02:44 PM, eric gisse wrote: >> Why disabling SELinux is important? Because both SELinux and CSP are doing the same thing, except CSP does it better! > I wonder how Symantec backs that claim up. Well that might be the same case in certain things, but when it comes to multi-tenant situations, with MCS Separation. CSP has no answer. > > On Fri, Dec 19, 2014 at 10:41 AM, Daniel J Walsh wrote: >> Currently Symantec requires SELinux be disabled, claiming there is >> conflicts in the kernel modules. >> >> http://www.symantec.com/connect/forums/does-scsp-agent-support-selinux >> >> As the customer wants to take advantage of certain SELinux features >> like sVirt for VMs and Docker Containers, this conflict is coming to a head. >> >> Is anyone familiar with whether or not this is a real conflict or just >> something assumed by Symantec? >> >> The customer like Symantec's ability to do intrusion detection and >> remote logging and configuration of CSB. >> >> Bottom line the customer wants both. >> _______________________________________________ >> Selinux mailing list >> Selinux@tycho.nsa.gov >> To unsubscribe, send email to Selinux-leave@tycho.nsa.gov. >> To get help, send an email containing "help" to Selinux-request@tycho.nsa.gov. > _______________________________________________ > Selinux mailing list > Selinux@tycho.nsa.gov > To unsubscribe, send email to Selinux-leave@tycho.nsa.gov. > To get help, send an email containing "help" to Selinux-request@tycho.nsa.gov. > >