Messages in this thread | | | Date | Wed, 13 Feb 2013 17:34:36 -0800 | From | Casey Schaufler <> | Subject | Re: [PATCH] x86: Lock down MSR writing in secure boot |
| |
On 2/13/2013 5:04 PM, Matthew Garrett wrote: > On Wed, 2013-02-13 at 16:44 -0800, Casey Schaufler wrote: > >> If you want that sort of granularity throw yourself on the SELinux >> bandwagon. Fine grained capabilities are insane and unmanageable >> and will only lead to tears. Security is despised because of the >> notion that making systems impossible to use is a good thing. > SELinux is completely unusable for this specific case. > Well, you'll get no argument from me there.
| |