lkml.org 
[lkml]   [2006]   [Apr]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [RFC][PATCH 4/11] security: AppArmor - Core access controls
    On 2006-04-20T08:33:13, Stephen Smalley <sds@tycho.nsa.gov> wrote:

    > > If you are a confined process, then you don't get to mount things, for
    > > this reason, among others.
    > Which is an example of the brokenness of the security model - its
    > fragileness in the face of manipulation of the file tree leads to
    > inflexibility.

    Now, now. Not every _limitation_ translates to _brokenness_. Some of
    them are simply that - limitations. If you no like, you no run that
    particular solution.



    --
    High Availability & Clustering
    SUSE Labs, Research and Development
    SUSE LINUX Products GmbH - A Novell Business -- Charles Darwin
    "Ignorance more frequently begets confidence than does knowledge"

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2006-04-20 18:29    [W:0.085 / U:0.500 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site