Se Linux And Pax/grsecurity... can be used together?

[Giniu 0]

Hi...I'm woundering if those systems can be used together... my first impression is that not, since both offers "Role-Based Access Control" (and other things) so this one (at least this one) would probably colide... but I'm not so sure... can anyone confirm that? If they colide, which one is better? I know that SE Linux is made by NSA (No Such Agency?), so this should (am I sure what I'm saying? ) be trusted enchantment... but GRsecurity team also made great work...

[Giniu 0]

Ok...I did some researches and decided to post my (still poor) results, since no one was able to help me, maybe someone would have similar problem... So:first: I was right, GRSecurity and SE Linux shouldn't be used to secure same thing, since they offer role based permisions, and using them to secure same thing can mes in our system (if seted wrong, it can even make it unusabe by securing everything for everyone)...socond: if you have to choose - take GRSecurity, since it easier than SE Linux and offer more features... SE Linux lack of network security improvements, chroot lock-down, lock-down of "ps aux" and "dmesg"There isn't much more to say... I choose GRSecurity -------------- informations taken from various mailing lists including Debian Mailing List