|
Abstract:
MAC based security systems have not achieved much popularity
because of both actually and perceived difficulties of use.
I will describe my
work in adding SE Linux
support to the Debian
distribution including packaging policy files, and supporting live
upgrades of software in a secure fashion. Given a choice between
security and manageability most organizations will not choose
security. Given a choice between security and ease of use most users
will not choose security. I aim to make SE Linux easy enough for
desktop users and manageable enough for commercial users.
Finally there are some issues regarding SE Linux management that
have not been addressed adequately (IMHO). I will discuss these with
the audience and I will be very interested in any suggestions for ways
to approach these problems.
slides
followup
|
