Matthias Jänichen wrote:

If you need something to use today you should look at www.rsbac.org.

RSBAC (Role Set Based Access Controll) is _working_ on Suse, running for over two years on productive systems. We've looked at LIDS, RSBAC and SELinux and decided to give SELinux a chance. RSBAC is easier to install, but it lacks LSM support and we don't know where RSBAC is going after Amon has finished its master thesis.

Mark