Messages in this thread |  | | | Date | Tue, 18 Apr 2006 16:00:23 -0700 (PDT) | | From | Casey Schaufler <> | | Subject | Re: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks |
| |
--- "Serge E. Hallyn" <serue@us.ibm.com> wrote:
> The posix caps sendmail fiasco is one example.
Sendmail with POSIX Capabilities works great on Irix, which is the system it was developed for. Irix, unlike Linux, supports (but, in keeping with IEEE rules does not claim to conform to) the POSIX Capabilities exec(2) symantics. The sendmail work was done in anticipation of Linux supporting Posix Capabilities. Alas, the xattr work on Linux was not done before the Company The Built Irix ran out of money to spend on security* and the push to get capabilities working right never materialized. Sorry.
---- * I'm not bitter. Oh no, it goes way beyond bitter.
Casey Schaufler casey@schaufler-ca.com - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
|  |