Hacker News new | ask | show | jobs
by totony 601 days ago
Most distros use https://github.com/SELinuxProject/refpolicy while RHEL uses https://github.com/fedora-selinux/selinux-policy

It's also my experience that Fedora has better support for it, but Gentoo used to be good enough with hardened gentoo (they use https://gitweb.gentoo.org/proj/hardened-refpolicy.git/). Redhat and Gentoo are the only ones that officially support it afaik. I think hardened gentoo might have lost popularity since the fall of grsec, but I'm not sure how popular it is currently.

1 comments

FWIW Android also uses SELinux & I believe selinux-policy. Have no idea about the quality of the implementation.
>Android also uses SELinux

Too bad you haven't even read a part of the article.

I was responding to what OP wrote:

> Redhat and Gentoo are the only ones that officially support it afaik