Messages in this thread | | | Date | Mon, 19 Jan 2004 10:25:33 -0800 | From | Chris Wright <> | Subject | Re: [PATCH 2/2] Default hooks protecting the XATTR_SECURITY_PREFIX namespace |
| |
* Theodore Ts'o (tytso@mit.edu) wrote: > Everyone realizes the protection is minimal, right? If you boot into
Yes. This is mostly about default protection where there was none. Trusting a default kernel to do all the right things before booting back to a more secure kernel is indeed risky.
thanks, -chris -- Linux Security Modules http://lsm.immunix.org http://lsm.bkbits.net - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |