[Discuss] SELinux & IPTables

Greg Rundlett (freephile) greg at freephile.com
Wed Apr 2 12:24:20 EDT 2014


It's rather (annoyingly) humorous that there is a webpage at the NSA titled
"Current State of SELinux"
http://www.nsa.gov/research/_files/selinux/papers/x/text8.shtml which is a
blank white page.  The page in question is supposed to be a slide in a
presentation, and can be seen here:
http://www.nsa.gov/research/_files/selinux/papers/x/img8.shtml  For
completeness, the 'official' NSA content on SELinux is at
http://www.nsa.gov/research/selinux/

Greg Rundlett
http://eQuality-Tech.com
http://freephile.org


On Wed, Apr 2, 2014 at 12:12 PM, Richard Pieri <richard.pieri at gmail.com>wrote:

> John Malloy wrote:
>
>> Does anyone have any suggestions for Best Practices in configuring SELinux
>> & IPTables for a RedHat (RHEL6)  server running Apache, PHP, and
>> connecting
>> to an Oracle DB (using OCI8)?
>>
>
> Don't use SELinux unless you're required to use it. For example, US
> government contracts. If you really need something along this line then
> either AppArmor or GrSec are better choices.
>
> Otherwise, everything Mark wrote applies.
>
> --
> Rich P.
>
> _______________________________________________
> Discuss mailing list
> Discuss at blu.org
> http://lists.blu.org/mailman/listinfo/discuss
>



More information about the Discuss mailing list