Messages in this thread | | | Subject | Re: secure computing for 2.6.7 | From | Stephen Smalley <> | Date | Tue, 03 Aug 2004 08:40:45 -0400 |
| |
On Wed, 2004-07-07 at 15:27, Hans Reiser wrote: > Am I right to think that this could complement nicely our plans > described at www.namesys.com/blackbox_security.html
Hi Hans,
Out of curiosity, what do you think that this proposal will achieve that cannot already be done via SELinux policy? SELinux policy can already express access rules based not only on the executable and user, but even the entire call chain that led to a given executable.
-- Stephen Smalley <sds@epoch.ncsc.mil> National Security Agency
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |