Messages in this thread | | | Subject | Re: Preview of changes to the Security susbystem for 2.6.36 | From | "David P. Quigley" <> | Date | Mon, 02 Aug 2010 14:34:21 -0400 |
| |
On Mon, 2010-08-02 at 09:59 -0700, Kees Cook wrote: [...snip] > > I've seen two so far. Both are addressed with a one line fix. And I would > stress that no other existing subsystem in the kernel can provide the same > level of control that my ptrace exception logic provides. SELinux cannot do > this. >
Would you mind explaining to me what you believe this patch can do that SELinux can't? Based on what I read in the kconfig entry for the feature and the subsequent exception patch I'm not seeing anything here that SELinux can't do. If there is something we are missing I'd like to understand it so we can make the decision on whether or not our ptrace access control checks need to be modified.
Dave
| |