[lkml]   [2006]   [Apr]   [18]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks
    On Maw, 2006-04-18 at 09:50 -0700, Gerrit Huizenga wrote:
    > > [1]
    > Interesting but I'm not impressed by the article. I think Stephen's

    Its really a quick summary of ideas, and you need to read other stuff
    beyond it to treat it as more than a "wakey wakey" piece. I'd also
    suggest reading Ross Andersons work on the economics of computer
    security if you haven't already.

    > machine, these two approaches start to converge. In the end it always
    > comes down to "how much security are you prepared to endure, given
    > that security almost always limits user capability".

    You need to define "you" in the above to start with. Thats very
    important in the sense that SELinux is capable of protecting systems
    from their users to an extent (users are remarkably resourceful little
    critters). The big goal in the Fedora case is that users don't notice
    the security.

    > or are there places where a "less than perfect, easy to use, good enough"
    > security policy? I believe there is room for both based on the end
    > users' needs and desires. But that is just my opinion.

    Poor security systems lead to less security than no security because it
    lulls people into a false sense of security. Someone who knows their
    house is insecure doesn't keep valuable items in it. Someone who thinks
    their house is secure but it is not increases the risk not decreases it.

    Doing good security is hard, and it does need to be from a "default
    deny" basis. Ask anyone at IBM who remembers the default PATH starting
    "." in AIX. Removing that was a move from default allow to default deny.
    Nobody today would consider it anything but sane. Ditto the default
    firewall on most Linux distros is 'default deny', something I did from
    day one with Lokkit.

    A security system that merely looks good is as useful as a database that
    looks pretty but doesn't always store the data you asked it to, and
    probably more dangerous.


    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2006-04-18 20:44    [W:0.020 / U:9.536 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site