Ive heard that Linux uses the old UNIX Security Model. Isn that a “Bad Thing”?
Security is not as simple as “good model vs. bad model”. There are many angles that need to be reviewed if we want to discuss the security of an OS. While it’s true that Linux doesn’t use access control lists (ACL’s), this in no way indicates that it is more prone to compromise or less secure. Actually, a poorly understood ACL implementation is less secure than no ACL implementation. Also, the Old Security Model has been breached and subsequently improved upon for considerably more years than that of other contemporary operating systems. This has lead to a higher level of maturity and attainable security. Following in these footsteps means that you do not have to make the same mistakes as your predecessors, and you are rarely in uncharted territory. Do you want something new for new-ness sake that has yet to prove itself, or something with almost thirty years of improvements? Any system is only as secure as its administrator makes it. Thus, the path to true security lies in the keeping
