Messages in this thread | | | Date | Fri, 21 Apr 2006 10:30:08 -0700 | From | Chris Wright <> | Subject | Re: [RFC][PATCH 0/11] security: AppArmor - Overview |
| |
* Stephen Smalley (sds@tycho.nsa.gov) wrote: > Difficult to evaluate, when the answer whenever a flaw is pointed out is > "that's not in our threat model." Easy enough to have a protection > model match the threat model when the threat model is highly limited > (and never really documented anywhere, particularly in a way that might > warn its users of its limitations).
I know, there's two questions. Whether the protection model is valid, and whether the threat model is worth considering. So far, I've not seen anything that's compelling enough to show AppArmor fundamentally broken. Ugly and inefficient, yes...broken, not yet.
thanks, -chris - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |