Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

>I would trust that as much as a distro brought to you by the NSA.

So do you run a version of the Linux kernel where SELinux[0] has been merged into the mainline?

[0] http://selinuxproject.org/page/Main_Page



SELinux is open source, is there any validity to a claim that SELinux performs anything other than securing the local operating system?


There are no claims that SELinux does anything other than secure the system, but if you're going to distrust things based solely on who sponsored them (Chinese government for this Linux distribution) then it makes sense to ask if this logic is applied consistently.

To make it crystal clear: I'm not saying SELinux is untrustworthy. I am just asking the poster if they would trust SELinux knowing that it came from the NSA. I ask the same question of people when they claim that Windows/OS X is untrustworthy because the NSA may have made changes to spy on the user through it.


I understand what you are saying now.


Nope. I use apparmor. Interesting though. I didn't know that about SELinux.


Do you use a kernel with a version greater than 2.5? Then you have SELinux as a part of your kernel source, so the NSA has sponsored made changes to your kernel.


Also a lot of Donald Becker's old network driver stuff in the kernel has a copyright assignment to DIRNSA. I don't know why, particularly because I thought Becker worked for NASA the whole time.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: