Re: Is removing selinux a bad idea?

[Mike's List]

On Thu, 20 Oct 2011, Todd And Margo Chester wrote:

Is selinux effective enough as an "extra line of defense against intruders"?

or mostly just a pain in the neck. I would like the extra line of defense, but only

if it works.

It depends on what you're running on the server and your IT environment.  A
good iptables rule/s should go a long way.  Allowing, or not allowing,
certain users access to certain services, applications, etc. is another
good way to start.


Mike