lkml.org 
[lkml]   [2007]   [Nov]   [28]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: Out of tree module using LSM
From
Date
On Wed, 28 Nov 2007 16:46:13 GMT, Christoph Hellwig said:
> On Wed, Nov 28, 2007 at 08:38:43AM -0800, Casey Schaufler wrote:
> > Would you like to expound on that, or do you feel your claws
> > are sharp enough already?
>
> Just take a look at code.

Just to clarify - you're OK with the *concept* (a security model that determines
whether you can do an I/O based on the content), it's just their code that's
ugly?

(Note that the concept has interesting implications in the other direction as
well - rather than stopping you from reading a file that has malware, you could
in theory write an anti-export package that would let you write onto external
memory or outbound e-mail, but prevent the write if it was corporate-sensitive
data, or whatever. Yes, I *know* a smart attacker can bypass it by simply
crypting/compressing it first - but the vast majority of attackers aren't
smart, and will just use 'cp' or the GUI equivalent to move the secret design
documents onto the USB key... )
[unhandled content-type:application/pgp-signature]
\
 
 \ /
  Last update: 2007-11-28 19:19    [W:0.208 / U:0.100 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site