Re: SELinux as a desktop / workstation?

[Will Dye <willdye@dsndata.com>]

Jan Petranek writes:

> I assume, that most of you are using SELinux for server purposes. 
> Is there someone, who is using it for his everyday-desktop machine?


A lot of Linux distros still turn on potentially-hazardous services 
by default, even on "workstation" installations.  I've read advice 
colums that strongly advise turning nearly all services off at all 
times, but personally I like having those options around.  I don't 
always know in advance when I might want to dial in from home to 
one of my work machines, for example.  Linux has not suffered as 
much as Windows from viruses & trojans, but it is not immune.  For 
these and other reasons, even Linux "workstation" installations may 
want ways to limit the amount of damage done by break-ins.

As long as the machine can handle a bit of a slowdown, I think it's 
a good idea to put something like SELinux on *every* system -- even 
my dinky old Toshiba 320CT laptop (266 MHz Pentium 1, 32 megs RAM).
There's a lot you can tweak if you need to cut back on the security 
processing overhead.  Desktop or server, I like my data intact.

Just one opinion,

--Will

 _____________________________________________________________________
 William Dye, Interim Chief Executive Cat-Herder, the Tweakdom Project
 Open-source tweaks to "Freedom", an Internet privacy software system.
 http://tweakdom.sourceforge.net   No relation Zero-Knowledge Systems.




--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.