[gentoo-hardened] Which security solution?

[Aiko Barz]

Hi,

I'm searching for a security solution. Since I like the
UNIX-permissions, selinux ist not my favorite. I also would like to
activate those additional rules for several processes only. I don't
want to have them systemwide. It's for keeping an eye on those 
programms which are reachable from the internet.

>From my investigations, systrace or AppArmor would fit. Both are not
available for Gentoo AFAIK. Is it possible to do this with 
- Grsecurity/RBAC?
- RSBAC?
- Selinux?
To be precise, the default rule shall be: Allow everything. 
I simply want to keep programs like qmail-ldap, dovecot and so on
within their allowed limits.

Regards,
    Aiko
-- 
:wq
-- 
gentoo-hardened@g.o mailing list