Requires Free Membership to View
It is important to note that when installing SEL on a Linux distribution that lacks official SELinux support (such as SUSE), you must compile the software and also have other necessary system packages. SELinux itself consists of an SELinux-enabled Linux kernel, which is a core set of libraries and utilities, some modified packages, and a policy configuration.
For example, Fedora cores 5 and 6, RHEL5, Hardened Gentoo and Debian etch, all are not only supported, but even have all SEL's recent technology enhancements integrated into their distributions. Some of these new innovations includes references polices, loadable modules and policy management infrastructure. It is important to reiterate that SELinux is not presently supported in the SuSE (and many others as well) Linux distribution.
While SLES9 has held an EAL4+ certification for awhile now and was also built around the 2.6 Linux kernel, Novell has not been a vocal supporter of SEL. Their public stance has been that the technology is just too complicated for users to implement successfully. A lot has changed recently with the new features of SEL (as well as the tighter integration with supported distributions), which make it much simpler to work with and perhaps could cause some future policy changes at Novell.
This was first published in August 2007

Join the conversationComment
Share
Comments
Results
Contribute to the conversation