lkml.org 
[lkml]   [2006]   [Apr]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks
    From
    Date
    On Tue, 2006-04-18 at 18:48 -0700, Casey Schaufler wrote:
    >
    > --- James Morris <jmorris@namei.org> wrote:
    >
    >
    > > With pathnames, there is an unbounded and unknown
    > > number of effective
    > > security policies on the system, as there are an
    > > unbounded and unknown
    > > number of ways of viewing the files via pathnames.
    >
    > I agree that for traditional DAC and MAC (including
    > the flavors supported by SELinux) inodes is the
    > only way to go. SELinux is a traditional Trusted OS
    > architecture and addresses the traditional Trusted
    > OS issues.

    Hmmm..can't say that SELinux has been accused of being a "traditional
    trusted OS architecture" before. Flask and TE aren't precisely
    traditional. But it does preserve the key characteristics required to
    support real MAC.

    > But as someone demonstrated earlier, not everyone
    > believes that an EAL makes them feel secure and that
    > is what LSM is really all about, allowing people
    > who don't care about Protection Profiles but who do
    > care about security to do something about it. How
    > many of you have lambasted me over the years because
    > I bled Orange? If SELinux is the only "secure" Linux
    > haven't the Orange Book/Common Criteria people proven
    > right in the end?

    This would be fine, if the technical approach were sound (not
    necessarily the same as SELinux, but sound) and fit properly with the
    LSM interface. But the path-based approach isn't technically sound, and
    even if we were to assume that it was, it isn't even a good fit for the
    LSM hook interfaces.

    --
    Stephen Smalley
    National Security Agency

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2006-04-19 14:52    [W:2.911 / U:0.832 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site