Re: AppArmor - makes mod_perl/mod_php safer on linux

2006-04-10 Thread Stas Bekman
Clinton Gormley wrote: On Sun, 2006-04-09 at 13:45 -0400, Jonathan Vanasco wrote: On Apr 9, 2006, at 5:02 AM, Kevin A. McGrail wrote: I'm under the impression that this is the same as SELinux (http://www.nsa.gov/selinux/info/faq.cfm) SELinux is at the kernel level + a few libraries, and fr

Re: AppArmor - makes mod_perl/mod_php safer on linux

2006-04-10 Thread Clinton Gormley
On Sun, 2006-04-09 at 13:45 -0400, Jonathan Vanasco wrote: > On Apr 9, 2006, at 5:02 AM, Kevin A. McGrail wrote: > > > I'm under the impression that this is the same as SELinux > > (http://www.nsa.gov/selinux/info/faq.cfm) > > SELinux is at the kernel level + a few libraries, and from what i >

Re: AppArmor - makes mod_perl/mod_php safer on linux

2006-04-09 Thread Jonathan Vanasco
On Apr 9, 2006, at 5:02 AM, Kevin A. McGrail wrote: I'm under the impression that this is the same as SELinux (http://www.nsa.gov/selinux/info/faq.cfm) SELinux is at the kernel level + a few libraries, and from what i read appArmor is just a library

Re: AppArmor - makes mod_perl/mod_php safer on linux

2006-04-09 Thread Kevin A. McGrail
I'm under the impression that this is the same as SELinux (http://www.nsa.gov/selinux/info/faq.cfm) Regards, KAM I was just at cansecwest (http://cansecwest.com/) here in Vancouver, and went to a talk by Crispin Cowan from Novell. He presented AppArmor which confines the application into a r

FYI: AppArmor - makes mod_perl/mod_php safer on linux

2006-04-07 Thread Stas Bekman
I was just at cansecwest (http://cansecwest.com/) here in Vancouver, and went to a talk by Crispin Cowan from Novell. He presented AppArmor which confines the application into a restricted mode (which files it can access and what it can and cannot do). Unlike jail/chroot AppArmor allows you to