Messages in this thread | | | Date | Mon, 13 Feb 2012 10:14:43 -0800 | From | Casey Schaufler <> | Subject | Re: difference between ACLs and SElinux |
| |
On 2/13/2012 1:10 AM, Bernd Petrovitsch wrote: > Hi! > > On Mon, 2012-02-13 at 14:30 +0530, bharat dhaker wrote: > [...] >> I want to know the differences between ACLs and SElinux.
The differences are many:
ACLs are an extension of the standard Linux Discretionary Access Control (DAC) mechanism. SELinux is a supplemental Mandatory Access Control (MAC) scheme.
ACLs are based on the withdrawn POSIX P1003.1e/2c DRAFT Standard and reflects a rough consensus of the industries Unix security experts of its day. SELinux started out as the Flask micro-kernel security architecture.
ACLs are part of the base kernel, while SELinux is a Linux Security Module.
>> Does anyone know >> which file-systems supports SElinux?
It's really much more the other way around. SELinux uses extended attributes (xattrs) and can take advantage of any filesystem that supports them.
> Google knows;-) > > Actually you make a small partition for each filesystem and try it out. > > Bernd
| |