Messages in this thread | | | Date | Mon, 18 Apr 2005 16:01:22 -0400 (EDT) | From | Rik van Riel <> | Subject | Re: [PATCH 0/7] procfs privacy |
| |
On Mon, 18 Apr 2005, Lorenzo Hernández García-Hierro wrote:
> Adding a "trusted user group"-like configuration option could be useful, > as it's done within grsecurity, among that the whole thing might be good > to depend on a config. option, but that implies using weird ifdef's and > the other folks.
I'd rather see something like this implemented as an LSM module - or better yet, an SELinux security policy.
There's no need to sprinkle security policy all over the kernel.
-- "Debugging is twice as hard as writing the code in the first place. Therefore, if you write the code as cleverly as possible, you are, by definition, not smart enough to debug it." - Brian W. Kernighan | |