Messages in this thread | | | Date | Thu, 20 Apr 2006 18:27:50 +0200 | From | Lars Marowsky-Bree <> | Subject | Re: [RFC][PATCH 4/11] security: AppArmor - Core access controls |
| |
On 2006-04-20T08:33:13, Stephen Smalley <sds@tycho.nsa.gov> wrote:
> > If you are a confined process, then you don't get to mount things, for > > this reason, among others. > Which is an example of the brokenness of the security model - its > fragileness in the face of manipulation of the file tree leads to > inflexibility.
Now, now. Not every _limitation_ translates to _brokenness_. Some of them are simply that - limitations. If you no like, you no run that particular solution.
-- High Availability & Clustering SUSE Labs, Research and Development SUSE LINUX Products GmbH - A Novell Business -- Charles Darwin "Ignorance more frequently begets confidence than does knowledge"
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |