Messages in this thread | | | From | Gerrit Huizenga <> | Subject | Re: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks | Date | Mon, 17 Apr 2006 15:15:29 -0700 |
| |
On Mon, 17 Apr 2006 15:31:08 EDT, James Morris wrote: > On Mon, 17 Apr 2006, Serge E. Hallyn wrote: > > > Hopefully a new version of evm+slim+ima will be ready for distribution > > soon. > > Why are you still trying to introduce yet another access control model > into the kernel, when SELinux is already there?
I get the impression from customers that SELinux is so painful to configure correctly that most of them disable it. In theory, LSM + something like AppArmour provides a much simpler security model for normal human beings who want some level of configuration. Also, the current SELinux config in RH is starting to have a measureable performance impact. I'm not sure this particular battle of the security models is quite over from a real user perspective.
gerrit - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |