Slashdot Mirror
A Gut Check On Gutsy Gibbon
jammag writes "Linux pundit Bruce Byfield looked inside the pre-release of Gutsy Gibbon and found what he calls 'Windows thinking.' His article, Divining from the Entrails of Ubuntu's Gutsy Gibbon, notes that Ubuntu is the dominant distro, having achieved a level of success that might be leading to complacency. He opines: 'Only once or twice did I find a balance between accessibility to newcomers and a feature set for advanced users. At times, I wondered whether the popularity might be preventing Ubuntu from finishing some rough edges.'"
I think that you have misunderstood what SELinux is all about. It is not a replacement for su or sudo, it is a completely different system. It allows the vendor/administrator to explicitly specify what privileges a specific process should have in fine-grained detail. Even though e.g. the apache account has read access to every file that everyone can read, SELinux enables you to specify that the apache process should be denied access to anything beyond its configuration file, its plugins and the web tree, even if it would have access according to the ordinary permissions system.
By restricting rights on this level of detail, a cracker exploiting a security hole in the apache process would not be able to access any file beyond those explicitly specified in the SELinux policy.