<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.5730.11" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=046030804-15102007><FONT face=Arial
color=#0000ff size=2>Oh lord, don't even get me started with the
AppArmor/SELinux craziness. I can't remember if it was InfoSec magazine, but
Crispin and some other dude went head to head on SELinux vs. AppArmor. By the
end of the article it was clear that neither are really useful, they are
impossible to configure correctly (something like 700+ policy lines for SELinux
and httpd) and in most cases are shut off. I know it's policy where I come from
to do a "setenforce 0" the minute we bring up a new machine
:)</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=046030804-15102007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=046030804-15102007><FONT face=Arial
color=#0000ff size=2>JS</FONT></SPAN></DIV></BODY></HTML>