Messages in this thread | | | Subject | Re: [PATCH] ptrace: allow restriction of ptrace scope | From | Theodore Tso <> | Date | Fri, 18 Jun 2010 06:54:57 -0400 |
| |
i think we really need to have stacked LSM's, because there is a large set of people who will never use SELinux. Every few years, I take another look at SELinux, my head explodes with the (IMHO unneeded complexity), and I go away again...
Yet I would really like a number of features such as this ptrace scope idea --- which I think is a useful feature, and it may be that stacking is the only way we can resolve this debate. The SELinux people will never believe that their system is too complicated, and I don't like using things that are impossible for me to understand or configure, and that doesn't seem likely to change anytime in the near future.
I mean, even IPSEC RFC's are easier for me to understand, and that's saying a lot...
-- Ted
| |