RSBAC Grsec Selinux ProPolice and Pax

Robert Connolly cendres at videotron.ca
Mon Jan 12 01:39:03 PST 2004


RSBAC and Grsec are each only supported by 1 developer. Selinux has several 
large companies (immunix, redhat), a gov't agency support, and is the best 
doccumented. Selinux is also able to work with Pax. I think Selinux has a 
better life expectency. I didn't look into OpenWall.

Grsec doesn't replace propolice. Pax/Grsec doesn't stop a return to libc 
attack, Pax does however _prevent_ it by using a random function.




More information about the hlfs-dev mailing list