lkml.org 
[lkml]   [2011]   [Nov]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH v6 0/3] security: Yama LSM
    On Wed, 26 Oct 2011, Kees Cook wrote:

    > As discussed at the Linux Security Summit, I'm resubmitting this
    > code. As an LSM, it has coherent policy around expanding specific DAC
    > behaviors. There is no need for it to be a full-blown MAC, since it is
    > not intended to be one, but rather to be a simplified expansion to DAC,
    > with system-wide knobs. See the specific patches for details...

    Yes, there was a strong consensus (unanimous I believe) at the security
    summit on incorporating the Yama LSM as a container for generally useful
    miscellaneous security hardening features that don't belong elsewhere.

    This means that LSM is no longer 'officially' only for access control
    mechanisms.

    We probably need to flesh out criteria for inclusion in Yama and document
    it.



    - James
    --
    James Morris
    <jmorris@namei.org>


    \
     
     \ /
      Last update: 2011-11-01 21:49    [W:4.234 / U:0.176 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site