| View previous topic :: View next topic |
| Author |
Message |
GNUtoo
Veteran
Joined: 05 May 2005
Posts: 1919
|
 Posted: Tue Jun 27, 2006 4:18 pm Post subject: |
 |
|
| Ctrl+Alt+Del wrote: | | Q-collective wrote: | | ASIO_BOB wrote: | | umm that was just an example. |
I know, but a good one. In windows you don't have the luxury of having a user account, so if your IIS server gets busted, you're fucked. |
i am pretty sure that is no longer the case, afaik the iis process is owned by a non-privileged user |
by default yes...but you can use system such as selinux in windows
but i don't know if it works well... |
|
| Back to top |
|
 |
Q-collective
Advocate
Joined: 22 Mar 2004
Posts: 2071
|
| Posted: Tue Jun 27, 2006 5:02 pm Post subject: |
|
|
| new_to_non_X86 wrote: | | Ctrl+Alt+Del wrote: | | Q-collective wrote: | | ASIO_BOB wrote: | | umm that was just an example. |
I know, but a good one. In windows you don't have the luxury of having a user account, so if your IIS server gets busted, you're fucked. |
i am pretty sure that is no longer the case, afaik the iis process is owned by a non-privileged user |
by default yes...but you can use system such as selinux in windows
but i don't know if it works well... |
You can use SELinux in Windows... ? |
|
| Back to top |
|
|
Chaosite
Guru
Joined: 13 Dec 2003
Posts: 540
Location: Right over here.
|
| Posted: Tue Jun 27, 2006 5:38 pm Post subject: |
|
|
| If by "selinux on windows" you means the ACL you get with Windows, then no. SELinux is much more than that. |
|
| Back to top |
|
|
GNUtoo
Veteran
Joined: 05 May 2005
Posts: 1919
|
| Posted: Tue Jun 27, 2006 6:19 pm Post subject: |
|
|
| Chaosite wrote: | | If by "selinux on windows" you means the ACL you get with Windows, then no. SELinux is much more than that. |
no i mean comportemental detection systems
that's the name of acess control under windows
i do not know more than that |
|
| Back to top |
|
|
GNUtoo
Veteran
Joined: 05 May 2005
Posts: 1919
|
| Posted: Tue Jun 27, 2006 6:20 pm Post subject: |
|
|
| Chaosite wrote: | | If by "selinux on windows" you means the ACL you get with Windows, then no. SELinux is much more than that. |
do you use selinux because beeing integrated inside the main kernel make it a very interesting system
praticaly speaking how selinux is managed?
is it hard?
do i need to buy the oreilly book on selinux?
how the profile is done for apps
i only know that selinux can:
*limit the syscall
*acl on filesystem
theses systems are difficult to understand because there are many different configuration possible
and praticaly speaking how do i migrate to selinux and what is the overhead? |
|
| Back to top |
|
|
|
Gentoo Chat
