In my mailbox: a review copy of O'Reilly's SELinux: NSA's Open Source Security Enhanced Linux, a new book by Bill McCarty on a Linux enhancement developed for the National Security Agency. I wasn't familiar with this project, but the book makes it tempting to carve off a hard drive partition this afternoon and try it out. SELinux offers role-based access control and privilege escalation baked into the kernel, as described by the NSA: This work is not intended as a complete security solution for Linux. ... read more