Andrew Kelly wrote:
At any rate, let's assume that SELinux is mature and ripe, that it interferes with nothing and there are no more issues with updates and whatnot. It's landed, and can be deployed without worry. What exactly do I gain by doing it? What have I protected myself from?
If you understand what SELinux is, the gain is immediately obvious. Here is a recent article
http://www.redhatmagazine.com/2007/05/04/whats-new-in-selinux-for-red-hat-enterprise-linux-5/ Rahul