Messages in this thread | | | Date | Fri, 18 Jun 2010 09:03:38 +1000 (EST) | From | James Morris <> | Subject | Re: [PATCH] ptrace: allow restriction of ptrace scope |
| |
On Thu, 17 Jun 2010, Alan Cox wrote:
> - You can put it together as a security module - which will make people > happy and get your stuff upstream. After that you can have a meaningful > discussion about stacking
It think this approach is worth pursuing, so that we can also see what's there, and determine if there is a need for some form of stacking, or whether we can consolidate some of this into library code which the various LSMs utilize.
People who don't want to run SELinux / AppArmor / Smack / TOMOYO etc., run can still get some protection.
- James -- James Morris <jmorris@namei.org>
| |