Trying to learn more about SELinux here...seems interesting! But, do not want to install fedora or tinker with my current box (running Mandrake 10.1 Community without any problems), as I've lot of important files stored on it. So wondering if theres any Live CD with SELinux support? I came accross ADIOS - but does not support 2.6 kernel yet.

Are there any others which I can try out? Does booting a live cd with selinux turned on affect my current installation by any chance?

Also, from what I gather, SELinux is a sort of parallel to GRSecurity? Which one do you think I should try out? I want something easy to learn :=

Also how is LIDS related to SELinux?

So wondering if theres any Live CD with SELinux support? I came accross ADIOS - but does not support 2.6 kernel yet.
Knoppix, Gentoo, PLD, SuSE AFAIk all offer LiveCD's with kernel 2.6 on it. If they offer SELinux as well I don't know as it's not something "generally accepted" so might have been disabled during the build.

Does booting a live cd with selinux turned on affect my current installation by any chance?
Not unless you let it mount the partitions/disks in read-write mode and muck around.

Also, from what I gather, SELinux is a sort of parallel to GRSecurity?
No. SELinux is quite different and incompatible with Grsec.

Which one do you think I should try out?
Since you're new to 2.6, you're not opinionated (..), and you most certainly won't have to support legacy stuff (..) so I guess it'll be easier to digest and learn :-]

I want something easy to learn Also how is LIDS related to SELinux?
Never tried LIDS or SELinux.
Two weeks before 2.4.x dies I'll bid Grsec farewell and look into that :-]

Hi,

Thanks for replying. I did try out Adios last week. Its perfect to try out SELinux because first of all its a Live CD and the next good thing is it comes pre-configured with UML; therefore you could load a SELinux kernel in UML and run the normal 2.4.x kernel (SELinux off) as your basic kernel. This way I think you won't screw up your box much esp people like me who always screw up something or the other very often trying to learn something

Btw, do you see any of these security-enhanced kernels becoming a standard soon? I heard FC3 has SELinux turned ON by default. Is anybody else adopting it too? Debian? I've never used Debian before; but I hear a lot about it being very stable.

Cheers,
Harish