Messages in this thread | | | Date | Wed, 19 Apr 2006 19:05:08 -0400 (EDT) | From | Rik van Riel <> | Subject | Re: [RFC][PATCH 4/11] security: AppArmor - Core access controls |
| |
On Wed, 19 Apr 2006, Crispin Cowan wrote: > Arjan van de Ven wrote:
> > that sounds too bad ;) > > If I manage to mount /etc/passwd as /tmp/passwd, you'll only find the > > later and your entire security system seems to be down the drain.
> If you are a confined process, then you don't get to mount things, for > this reason, among others.
Are confined processes always restricted from starting non-confined processes?
-- All Rights Reversed - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |