Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 17035

A filesystem-independent Linux kernel security module enabling Mandatory Access Control (MAC).

10 votes
Accepted

Restrict access to a specific directory on Linux

The upside -- yes, you can do this with SELinux. The downside -- you have to know SELinux. :) You can execute these processes in different SELinux domains. E.g. let's call two processes "privapp" and …
mricon's user avatar
  • 6,578
1 vote

Network policies under AppArmor/SELinux

To add a personal experience note to the above -- using selinux in conjunction with iptables makes both the policy and your iptables look extremely complicated and convoluted. It's one of those cases …
mricon's user avatar
  • 6,578