lkml.org 
[lkml]   [2006]   [Apr]   [24]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [RFC][PATCH 0/11] security: AppArmor - Overview
    On 2006-04-24T09:14:58, Arjan van de Ven <arjan@infradead.org> wrote:

    > does apparmor at least (offer) to kill the app when this happens?
    > (rationale: the app is hijacked, better kill it before it goes to do
    > damage)

    Heh, that was just my question to Crispin this morning, because that's
    what I'd prefer too.

    Not just for security, but simply because experience shows that error
    paths are not well auditted in general; even if it doesn't cause
    privilege escalation, I prefer if it doesn't shred the data it is
    allowed to access by hitting a misconfiguration in my profile...



    --
    High Availability & Clustering
    SUSE Labs, Research and Development
    SUSE LINUX Products GmbH - A Novell Business -- Charles Darwin
    "Ignorance more frequently begets confidence than does knowledge"

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2006-04-24 10:13    [W:5.174 / U:0.312 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site