lkml.org 
[lkml]   [2006]   [Apr]   [21]   [last100]   RSS Feed
Views: [more markup]  [less markup]  [headers]  [forward] 
 
Messages in this thread
/
DateFri, 21 Apr 2006 10:30:08 -0700
FromChris Wright <>
SubjectRe: [RFC][PATCH 0/11] security: AppArmor - Overview
* Stephen Smalley (sds@tycho.nsa.gov) wrote:
> Difficult to evaluate, when the answer whenever a flaw is pointed out is
> "that's not in our threat model."  Easy enough to have a protection
> model match the threat model when the threat model is highly limited
> (and never really documented anywhere, particularly in a way that might
> warn its users of its limitations).

I know, there's two questions.  Whether the protection model is valid,
and whether the threat model is worth considering.  So far, I've not
seen anything that's compelling enough to show AppArmor fundamentally
broken.  Ugly and inefficient, yes...broken, not yet.

thanks,
-chris
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2006-04-21 19:33    [from the cache]
©2003-2008