SELinux

пробвайвате ssh до selinux.dev.gentoo.org
user : root
password: gentoo

правата са руутски но ....
какво ли можете да направите с тях ......

Hardened Gentoo demonstrates SELinux

Hardened Gentoo is proud to announce that we have made available a machine to demonstrate some of our technology. The machine is available via ssh to illustrate SELinux, an advanced mandatory access control system. The reason we are providing this to everyone is to show everyone the significance of the work we are doing.


What this machine is:

A Gentoo installation secured with SELinux, running several daemons for testing in a production environment.

What this machine is not:

A chrooted installation
A uml installation
A userland restricted shell (ie: rbash)
A honeypot/honeynet
A completely useless and stripped down machine
Impervious to DoS attacks (don't DoS or forkbomb, it doesn't do anything except annoy people and stop others from enjoying the machine)
A workstation; the main focus is on servers, running selinux on desktops is possible, but not currently supported


[линк]

Има ли някой който да преведе това?

What this machine is not:

A chrooted installation
A uml installation
A userland restricted shell (ie: rbash)
A honeypot/honeynet
A completely useless and stripped down machine
Impervious to DoS attacks (don't DoS or forkbomb, it doesn't do anything except annoy people and stop others from enjoying the machine)
A workstation; the main focus is on servers, running selinux on desktops is possible, but not currently supported

Казано по-порстичко това е софтуер разработван от Националната агенция за сигурност на щатите ..
с него се въвежда ниво на сигурност в Линукс базираните сървъри.
Т.Е. дори някой да ти хакне сървъра и по някакъв начин да се сдобие с административни права той не може нищо да направи
по-този начин отпада необходимостта от chroot-ване и какви ли не други мерки по отношение на сигурността.
ако командата chroot не ти говори нищо то тогава не си губи времето с глупости
:)