Messages in this thread | | | Date | Fri, 18 Nov 2011 15:17:12 +1100 (EST) | From | James Morris <> | Subject | Re: [PATCH v6 0/3] security: Yama LSM |
| |
On Wed, 26 Oct 2011, Kees Cook wrote:
> As discussed at the Linux Security Summit, I'm resubmitting this > code. As an LSM, it has coherent policy around expanding specific DAC > behaviors. There is no need for it to be a full-blown MAC, since it is > not intended to be one, but rather to be a simplified expansion to DAC, > with system-wide knobs. See the specific patches for details...
In principle, Yama can be merged, however there are features with unresolved upstream naks:
- Handling symlinks in sticky directories - The ptrace tracker
These still need to be resolved.
-- James Morris <jmorris@namei.org>
| |