Hacker News new | ask | show | jobs
by apurvadave 3393 days ago
The feeling you describe here is part of what led to the design of Sysdig Falco (http://www.sysdig.org/falco). While certainly not a 1:1 SELinux replacement, our goal was to use a much simpler, understandable model for describing & monitoring security policies for linux hosts.