Messages in this thread | | | From | Andy Lutomirski <> | Date | Tue, 1 Sep 2015 14:40:35 -0700 | Subject | Re: kdbus_proc_permission (Re: [GIT PULL] kdbus updates for Greg) |
| |
On Tue, Sep 1, 2015 at 2:24 PM, Josh Boyer <jwboyer@fedoraproject.org> wrote: > > Confining things through xattr labels on inodes. ;) FWIW, despite > warnings to the contrary, the test system I have does boot just fine > with SELinux in Enforcing mode. It is likely the least scientific and > useful scenario though, as it is just a dumb headless NUC box that all > I do is test kernels on. I won't even pretend that my mention here is > anything more than an anecdote along the lines of "cool story, bro."
It's too bad that there isn't a well-supported way to lock down /proc other than setting up inode labels and adding MAC policy.
--Andy
| |