RSBAC Grsec Selinux ProPolice and Pax

Robert Connolly cendres at
Mon Jan 12 01:39:03 PST 2004

RSBAC and Grsec are each only supported by 1 developer. Selinux has several 
large companies (immunix, redhat), a gov't agency support, and is the best 
doccumented. Selinux is also able to work with Pax. I think Selinux has a 
better life expectency. I didn't look into OpenWall.

Grsec doesn't replace propolice. Pax/Grsec doesn't stop a return to libc 
attack, Pax does however _prevent_ it by using a random function.

More information about the hlfs-dev mailing list