Messages in this thread | | | Date | Mon, 24 Apr 2006 07:56:41 -0500 | From | "Serge E. Hallyn" <> | Subject | Re: Time to remove LSM (was Re: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks) |
| |
Quoting Alan Cox (alan@lxorguk.ukuu.org.uk): > On Llu, 2006-04-24 at 10:24 +0200, Lars Marowsky-Bree wrote: > > On 2006-04-23T05:45:34, Valdis.Kletnieks@vt.edu wrote: > > > > > > AppArmor are not likely to put careful thought into the policies that > > > > they use? > > > They're not likely to put careful thought into it, *AND* that saying things > > > like "AppArmor is so *simple* to configure" only makes things worse - this > > > encourages unqualified people to create broken policy configurations. > > > > That is about the dumbest argument I've heard so far, sorry. > > Its the conclusion of most security experts I know that broken security > is worse than no security at all.
By the way, this is predicated on the assumption that the broken security will cause the user to expose more data. However in many cases these days, that is sadly not the case. Amazon will store my cc data regardless whether they are running selinux, apparmor, or nothing.
-serge - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |