Messages in this thread | | | Date | Tue, 29 May 2007 08:52:14 -0700 (PDT) | From | Casey Schaufler <> | Subject | Re: [AppArmor 01/41] Pass struct vfsmount to the inode_create LSMhook |
| |
--- Tetsuo Handa <from-lsm@I-love.SAKURA.ne.jp> wrote:
> Conventional UNIX's access control can't restrict > which path_to_file can link with which another_path_to_file > because UNIX's access control is a label-based access control.
UNIX access control is attribute based, not label based. The distinction may be hair splitting in the current context, but could be significant later if the thread continues.
Casey Schaufler casey@schaufler-ca.com - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |