[lkml]   [2007]   [May]   [29]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [AppArmor 01/41] Pass struct vfsmount to the inode_create LSM hook
    2007/5/29, Kyle Moffett <>:
    > >>> But writing policy with labels are somewhat indirect way (I mean,
    > >>> we need "ls -Z" or "ps -Z"). Indirect way can cause flaw so we
    > >>> need a lot of work that is what I wanted to tell.
    > >>
    > >> I don't really use "ls -Z" or "ps -Z" when writing SELinux policy; I
    > >> do that only when I actually think I mislabeled files.
    > >
    > > I believe what you wrote, but it may not be as easy for average
    > > Linux users.
    > As I said before, average Linux users should not be writing their own
    > security policy. I have yet to meet an "average Linux user" who
    > could reliably quote for me what the file permissions on the "/tmp"
    > directory should be, or what the sticky bit was. A small percentage
    > of average Linux system administrators don't get that right
    > consistently, and if you don't understand the sticky bit then you
    > should *definitely* not be controlling program permissions on a per-
    > syscall basis.

    Thank you for your detailed and thoughtful explanation.
    Things are much clear now for me. Although your explanation was
    quite persuasive, I still have some concerns.

    Linux is now being used literately everywhere. As devices, technologies and
    Linux itself is evolving so quickly, I'm afraid the way you showed was right
    but could never meet the every goal perfectly. So some areas, including
    embedded and special distro I guess, there must be solutions and help for
    average level administrators.

    I think there are two ways to make secure systems. One is just
    you wrote: "ask it professionals" way, the other is "making practices".
    You might ask "how?" My answer to the question is pahtname-based
    systems such as AppAmor and TOMOYO Linux.
    They can't be compared to SELinux, but they should be considered to
    supplemental tools. At least they are helpful to analyze how Linux works.
    Tweeking SELinux policy is not easy but writing policies for
    them is relatively easy (I'm not talking about security here).

    Not everybody can be a professional administrators, but he/she can be a
    professional administrator of his/her system. I believe there must be
    solutions for non professional administrators. That's why we developed
    TOMOYO Linux ( and so was AppArmor
    I guess. You might laugh, but we are doing this because we want to
    contribute to Linux and its community. :)

    Toshiharu Harada
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2007-05-30 04:41    [W:0.602 / U:5.560 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site