A Seatbelt for Server Software: SELinux Blocks Real-World Exploits

“Linux security experts are reporting a growing list of
real-world security situations in which the US National Security
Agency’s SELinux security framework contains the damage resulting
from a flaw in other software. These so-called ‘mitigations’ are
showing that a Linux feature that began as an esoteric security
measure is starting to prove its worth.

“The US National Security Agency first published SELinux in
2000, and Linus Torvalds accepted it into the mainstream kernel in
2002, but for much of the time since then it has been largely of
academic interest…”

Complete
Story