Red Hat Enterprise Linux 4, What's New

• seLinux Mandatory Access Control (by NSA)

• seLinux integration with public daemons

• “Exec Shield” buffer/stack protection

• Buffer validation in GCC/Glibc

• Same up2date/autoupdates subscription

• BIND DNS runs “chrooted”

• Better PAM integration with SMB, Kerberos...

• EAL4+ certification (pending)

Notes: