SnooT Posted March 2, 2014 Share Posted March 2, 2014 I have been reading up on SELinux and learning the 'in's and out's' of it so to say. Im wondering Is SELinux a industry security standard for companies employing linux based systems? Quote Link to comment Share on other sites More sharing options...
THCMinister Posted March 2, 2014 Share Posted March 2, 2014 Having worked for a fairly large corporation, I know majority of our Linux based systems in our non-production environment had SELinux disabled. As for the production environment, SELinux was configured quite extensively. Quote Link to comment Share on other sites More sharing options...
SnooT Posted March 3, 2014 Author Share Posted March 3, 2014 Ah cool thats pretty interesting and I can see why they would employ it in a production enviroment instead of a having it across the entire company. THCMinister, did the corporation you work for employ just SELinux or did it have a multitude of security for linux such as AppArmor or GrSecurity? Quote Link to comment Share on other sites More sharing options...
THCMinister Posted March 7, 2014 Share Posted March 7, 2014 It was just SELinux. Most of the security we ran was network software/hardware based security. Routers/switches/etc.. Root was disabled but there were users with elevated privileges. Developers never had access to Production, and in Dev, they very seldom had elevated privileges. We mainly set them up with RSA keys. We had a lot of monitoring applications for linux(and windows) that was primarily for security. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.