"Three years in the making, Red Hat Enterprise Linux (RHEL) 6 is
a gutsy, green upgrade that features native support for KVM, the
Linux kernel-based virtual machine.
"RHEL6 isn't revolutionary. But it does a nice job of advancing
ideas that first appeared in other releases. For example, Security
Enhanced Linux (SELinux), a security-focused subset of Linux,
offers partitioning of resources so that user processes can't
hijack kernel root-privileged processes.
"RHEL6 takes SELinux and adds sandboxing policies that allow
sysadmins or processes to further isolate sessions or applications.
Policy controls also allow admins to confine session or resource
access as well.
"We were heartened by these extensions, as they're needed tools
to isolate both users and processes from destabilizing busy