Bitcoin Forum
August 18, 2018, 02:30:40 PM *
News: Latest stable version of Bitcoin Core: 0.16.2  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: Should I look at SElinux to run a full node computer?  (Read 52 times)
Jet Cash
Legendary
*
Offline Offline

Activity: 980
Merit: 1130


VOM member


View Profile WWW
April 21, 2018, 07:57:07 AM
Merited by paxmao (1)
 #1

Quote from: Centos.org
Security-Enhanced Linux (SELinux) is a mandatory access control (MAC) security mechanism implemented in the kernel. SELinux was first introduced in CentOS 4 and significantly enhanced in later CentOS releases. These enhancements mean that content varies as to how to approach SELinux over time to solve problems.
https://wiki.centos.org/HowTos/SELinux
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/5/html/deployment_guide/ch-selinux

It appears to be a security enhancement for various Linux distros, and there is a freeware version. I haven't read the papers in depth yet, and I wondered if any members here had considered using it, and what benefits they would expect to get from it.
1534602640
Hero Member
*
Offline Offline

Posts: 1534602640

View Profile Personal Message (Offline)

Ignore
1534602640
Reply with quote  #2

1534602640
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
Quickfant
Member
**
Offline Offline

Activity: 118
Merit: 18


View Profile
April 21, 2018, 09:24:41 AM
Merited by Welsh (2), Jet Cash (2), Flying Hellfish (1), paxmao (1), AverageGlabella (1)
 #2

It does claim to be more secure and other Linux distributions although if you look around it's been criticized for being over complicated and not user friendly. SELinux acts sort of like a firewall and as a core is a great idea and should be more secure than the standard Linux distributions although getting it to work has been very difficult for me. The tools that come with it simply aren't very user friendly and it takes hours at times just to perform a simple task.

I'm experienced in Linux and have been using it for many years but I found SE very difficult.  I guess it all depends on what you are using it for. I know you've said that you will be hosting a full node on it. But will you be storing any coins on it? If you are only storing the full node and that's all the computer will be used for it's probably not worth it. It would be overkill and you probably don't need a ultra secure node. On the other hand if you are storing a large amount of coins or even enough that you think need to be secured then you could try out SElinux. Although I would recommend just storing any coins separate from a full node and just fun a full node after all you are helping the bitcoin network out by running it! Of course if you are suspicious of your government or how they spy on you then remember that it was created by the NSA...

If you like to learn then SElinux is a great choice it's more secure and is a challenge to learn. I didn't give up on it and have a computer running it. One of the best resources of learning it for me was a coloring book (yes a childs plaything) if you do decide on using it and learning it I would suggest taking a look at it: https://people.redhat.com/duffy/selinux/selinux-coloring-book_A4-Stapled.pdf

It tries to simplify SELinux with the usage of images to understand it pretty neat way of going about it I think.  
Conasse
Jr. Member
*
Offline Offline

Activity: 201
Merit: 0


View Profile
April 21, 2018, 08:48:47 PM
 #3

If it's for your daily routine then it will be useless for you
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!