SELinux Contexts & Mark-Sweep Algorithm

Question

Using NSA's file labeling in SELinux (Contexts), does it make sense to incorporate a custom file security attribute that can be included in ABAC (attribute based access control)? Specifically, are there any industry standards that bake attributes into SELinux that are then included in a custom Mark-Sweep Algorithm?

Thanks!!! #Freedom

Answer 1

I agree with @SantiagoSquarzon - that's going to be a performance hit.

Consider using writing a function to run Get-ChildItem recursively with the -MaxDepth parameter, including a Start-Sleep command to pause occasionally. Also, you may want to note this link

You'd also want to Export-CSV to a shared network drive to collect all the machines' results.

The backticks indicate a continuation of the line, like \ in bash.

Finally, consider using a Scheduled Task or start a powershell sub-process with a lowered process priority, maybe that will help?