Check out ..... AppArmor >From Wikipedia, the free encyclopedia http://en.wikipedia.org/wiki/AppArmor AppArmor ("Application Armor") is a security module for the Linux kernel, released under the GNU General Public License. From 2005 through September 2007, AppArmor was maintained by Novell. AppArmor allows the system administrator to associate with each program a security profile that restricts the capabilities of that program. It supplements the traditional Unix discretionary access control (DAC) model by providing mandatory access control (MAC). It was included as of the 2.6.36 version of the mainline Linux kernel.
In addition to manually specifying profiles, AppArmor includes a learning mode, in which violations of the profile are logged, but not prevented. This log can then be turned into a profile, based on the program's typical behavior. AppArmor is implemented using the Linux Security Modules (LSM) kernel interface. AppArmor is offered in part as an alternative to SELinux, which critics consider difficult for administrators to set up and maintain.[1] Unlike SELinux, which is based on applying labels to files, AppArmor works with file paths. Proponents of AppArmor claim that it is less complex and easier for the average user to learn than SELinux.[2] They also claim that AppArmor requires fewer modifications to work with existing systems:[citation needed] for example, SELinux requires a file system that supports "security labels", and thus cannot provide access control for files mounted via NFS. AppArmor is file system-neutral. --------- Case Harden Linux Security Posted by Linux Ducks on November 1, 2010 at 9:52 PM comments (0) http://linuxducks.webs.com/apps/blog/show/5216825-case-harden-linux-security I would like to post for windows users security doubters one simple security ware idea available for Linux, and invite you to read the product description as available security to really "case harden" your Linux.... AppArmor description http://linux.softpedia.com/get/Security/ Linux application security framework AppArmor is a software that gives you network application security via mandatory access control for programs, protecting against the exploitation of software flaws and compromised systems. AppArmor is an effective and easy-to-use Linux application security system. AppArmor proactively protects the operating system and applications from external or internal threats, even zero-day attacks, by enforcing good behavior and preventing even unknown application flaws from being exploited. AppArmor security policies completely define what system resources individual applications can access, and with what privileges. A number of default policies are included with AppArmor, and using a combination of advanced static analysis and learning-based tools, AppArmor policies for even very complex applications can be deployed successfully in a matter of hours. What's New in This Release: [ read full changelog ]..... -------------------------------------------------- From: "novicegeek" <[email protected]> Sent: Thursday, March 17, 2011 9:34 AM To: <[email protected]> Subject: [LINUX_Newbies] What are the basic components in a typical Linux network? I know what some people will say. Linux has absolute flexibility in its network. You can put just about anything in it. It also does not really have a domain controller, etc. However, if we were to set up our own Linux network, what are the basic components we need? In a Window network, we need a domain controller with Active Directory installed. What do we need for Linux? What exactly are the necessary components we need for a Linux network? I think we need at least an OpenLDAP, don't we? And also some servers. What are the other stuff to make a good Linux network? I am a newbie in this. Thanks. ------------------------------------ To unsubscribe from this list, please email [email protected] & you will be removed.Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/LINUX_Newbies/ <*> Your email settings: Individual Email | Traditional <*> To change settings online go to: http://groups.yahoo.com/group/LINUX_Newbies/join (Yahoo! ID required) <*> To change settings via email: [email protected] [email protected] <*> To unsubscribe from this group, send an email to: [email protected] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
