[DSE-User] SELinux and Xen

[Bill Thompson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello all,

I would like to hear peoples opinions about SELinux and Xen. I am
upgrading my home firewall, and plan on installing SELinux to protect
the system. I will also be adding an externally accessed web server and
internally accessed DNS server to the system. 

Is there any security advantage to running Xen virtual machines for
these services, or do you think that SELinux and IPtables is enough? I
like the idea of running VMs for services, but it seems redundant given
the privilege separation that SELinux provides. Your opinion would be
appreciated.

- -- 
Bill Thompson
BillT at Mahagonny.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFG8sqwuLPldPuWZnARAubxAJ0Yogk2YAxtIXXcAvcdcOb4QsWEfgCg4f/u
7mdAd670X5cwx8rUFLt/nng=
=OVIX
-----END PGP SIGNATURE-----