Have you ever worked on a Mandatory Access Control computer system of any kind? They are extremely inconvenient, and thus rare to find outside classified environments. The engineering effort to write and maintain a functional set of SELinux policies is a large budget item. But the NSA did not engineer and release SELinux because it doesn't work.
Comments
Have you ever worked on a Mandatory Access Control computer system of any kind? They are extremely inconvenient, and thus rare to find outside classified environments. The engineering effort to write and maintain a functional set of SELinux policies is a large budget item. But the NSA did not engineer and release SELinux because it doesn't work.