[lkml]   [2007]   [Oct]   [31]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: Linux Security *Module* Framework (Was: LSM conversion to static interface)
    On 11/1/07, Casey Schaufler <> wrote:
    > --- Peter Dolding <> wrote:
    > > Improvements to the single security framework are getting over looked.
    > Please post proposed patches.
    > > I would have personally though selinux would have done Posix file
    > > capabilities as a general service to all.
    > Posix capabilities predate SELinux. SELinux is not interested in
    > Posix capabilities.
    > > But no IBM had to do it.
    > Err, no. It was done by Andrew Morgan back in the dark ages.
    > Why on earth do you think IBM did it?

    Posix file capabilities the option to replace SUID bit with something
    more security safe only handing out segments of root power instead of
    the complete box and dice like SUID. Even different on a user by user

    Posix capabilites is what Posix file capabilities is based on. Yes I
    know the words appear close. The word file is important. Please read

    IBM coders worked and got it into the main line really recently to
    provide at least some way to avoid fault of SUID of course it could
    still be made better. I would have though being a important problem
    that other LSM guys would have done it first. So door to add new
    features to kernel is open past any question. Of course the features
    have to be for everyones good.

    Andrew Morgan Posix capabilities is something far older its been there
    for ages pre selinux the correct fix to SUID for everyone has always
    been there by extending Andrew Morgan's work. So I will ask again why
    did IBM have to do Posix file capabilities instead of Selinux.
    Selinux has had 7+ years to do it.

    Thank you for proving my point past question Casey Schaufler. You
    don't have a single clue of the alterations happing to the main
    security model so there is every chance you will overlap with it.

    Please get you tech right. How many other holes are sitting open
    because you patch them at LSM level and don't look down into default
    security system to see if it should be fixed there.

    > OK, you have all the answers. Show us some code or STFU.

    That is no explanation to why the default security frame work is being
    neglected. I don't have all the answers. It does not take a person
    that high so see that LSM is a screwup leading to people being out of
    touch with the main security model and its neglect. It should not be
    requiring outside parties to fix things that in the main security
    model. Only way that can be happening is if LSM is dysfunctional. 7+
    year fault at min is not what you can call someone fixing a new fault.
    Now how are we going to fix the mess of LSM's to work correctly for
    the good of linux.

    One way is appoint one hard minded maintainer that is above my rights.

    This is above me doing code. No matter how many fixes I do to the
    core that will not fix dysfunction in the LSM section. Strict
    policies on fixing the main security model will be required.

    Peter Dolding
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2007-11-01 03:55    [W:0.022 / U:3.928 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site