Re: selinux stole my bank details (and my pony)

Robin Humble <rjh+luv@cita.utoronto.ca> writes:

if so then (Russell, I'm looking at you :-) why are you still confident selinux is a good thing and not just something designed to be so complex or so subtly buggy that the NSA can hide backdoors in it?

If you don't like SELinux, which LSM *do* you like? Are you advocating LSMless SUS DAC?

Android 4.3 has started using selinux. do we really trust android vendors to be on top of complex selinux configs or would we be better off with it err, off?

If you're running Frobozz distro and you don't trust Frobozz, Inc. to get security right, maybe you should pick a different distro.