Messages in this thread | | | Subject | Re: [RFC][PATCH 0/11] security: AppArmor - Overview | From | Stephen Smalley <> | Date | Wed, 26 Apr 2006 08:15:25 -0400 |
| |
On Tue, 2006-04-25 at 20:42 -0700, Casey Schaufler wrote: > > --- "Randy.Dunlap" <rdunlap@xenotime.net> wrote: > > > use that internet thing, e.g., www.dict.org, and > > look at "conflate". > > OK. I am not conflating the policy issues and the > mechanism issue of SELinux. The mechanisms of SELinux > lead to the policy issues. A complete set of policies > for an SELinux system require an unreasonable number > of rules. This violates the Third item of the TCB > principle, which is the the TCB must be small enough > to analyse. The mechanisms are pointless without the > rules. > > Conflating my forehead!
The policy is analyzable, and there are tools (apol and slat) that do precisely that. Including information flow analysis and invariant checking. What's your problem, again?
-- Stephen Smalley National Security Agency
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |