lkml.org 
[lkml]   [2007]   [Jun]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: [AppArmor 01/41] Pass struct vfsmount to the inode_create LSM hook
    From
    Date
    On Thu, 24 May 2007 14:47:27 -0000, Pavel Machek said:
    > Yes, if there's significantly more remote bad guys than local bad
    > guys, and if remote bad guys can't just get some local user first, AA
    > still has some value.

    Experience over on the Windows side of the fence indicates that "remote bad
    guys get some local user first" is a *MAJOR* part of the current real-world
    threat model - the vast majority of successful attacks on end-user boxes these
    days start off with either "Get user to (click on link|open attachment)" or
    "Subvert the path to a website (either by hacking the real site or hijacking
    the DNS) and deliver a drive-by fruiting when the user visits the page".


    [unhandled content-type:application/pgp-signature]
    \
     
     \ /
      Last update: 2007-06-01 19:47    [W:4.075 / U:0.044 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site