RSBAC Grsec Selinux ProPolice and Pax
cendres at videotron.ca
Mon Jan 12 01:39:03 PST 2004
RSBAC and Grsec are each only supported by 1 developer. Selinux has several
large companies (immunix, redhat), a gov't agency support, and is the best
doccumented. Selinux is also able to work with Pax. I think Selinux has a
better life expectency. I didn't look into OpenWall.
Grsec doesn't replace propolice. Pax/Grsec doesn't stop a return to libc
attack, Pax does however _prevent_ it by using a random function.
More information about the hlfs-dev