lkml.org 
[lkml]   [2007]   [Jun]   [15]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [AppArmor 39/45] AppArmor: Profile loading and manipulation, pathname matching
    On Fri, Jun 15, 2007 at 01:43:31PM -0700, Casey Schaufler wrote:
    >
    > Yup, I see that once you accept the notion that it is OK for a
    > file to be misslabeled for a bit and that having a fixxerupperd
    > is sufficient it all falls out.
    >
    > My point is that there is a segment of the security community
    > that had not found this acceptable, even under the conditions
    > outlined. If it meets your needs, I say run with it.

    If that segment feels that way, then I imagine AA would not meet their
    requirements today due to file handles and other ways of passing around
    open files, right?

    So, would SELinux today (without this AA-like daemon) fit the
    requirements of this segment?

    thanks,

    greg k-h
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2007-06-15 23:17    [W:4.062 / U:0.008 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site