Messages in this thread | | | Date | Thu, 13 Jul 2017 14:51:06 -0500 | From | "Serge E. Hallyn" <> | Subject | Re: [kernel-hardening] [PATCH 00/11] S.A.R.A. a new stacked LSM |
| |
Quoting Mimi Zohar (zohar@linux.vnet.ibm.com): > On Thu, 2017-07-13 at 08:39 -0400, Matt Brown wrote: > The question is really from a security perspective which is better? > Obviously, as v2 of the patch set changed from using pathnames to > inodes, it's pretty clear that I think inodes would be better. Kees, > Serge, Casey any comments?
Yes, inode seems clearly better. Paths are too easily worked around.
| |