Messages in this thread | | | Date | Fri, 22 May 2009 09:32:39 +1000 (EST) | From | James Morris <> | Subject | Re: [PATCH] IMA: Minimal IMA policy and boot param for TCB IMA policy |
| |
On Thu, 21 May 2009, Eric Paris wrote:
> The IMA TCB policy is dangerous. A normal use can use all of a system's > memory (which cannot be freed) simply by building and running lots of > executables. The TCB policy is also nearly useless because logging in as root > often causes a policy violation when dealing with utmp, thus rendering the > measurements meaningless.
Applied to git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/security-testing-2.6#next
-- James Morris <jmorris@namei.org>
| |