lkml.org 
[lkml]   [2015]   [Sep]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Date
SubjectRe: kdbus_proc_permission (Re: [GIT PULL] kdbus updates for Greg)
On Tue, Sep 1, 2015 at 2:24 PM, Josh Boyer <jwboyer@fedoraproject.org> wrote:
>
> Confining things through xattr labels on inodes. ;) FWIW, despite
> warnings to the contrary, the test system I have does boot just fine
> with SELinux in Enforcing mode. It is likely the least scientific and
> useful scenario though, as it is just a dumb headless NUC box that all
> I do is test kernels on. I won't even pretend that my mention here is
> anything more than an anecdote along the lines of "cool story, bro."

It's too bad that there isn't a well-supported way to lock down /proc
other than setting up inode labels and adding MAC policy.

--Andy


\
 
 \ /
  Last update: 2015-09-02 00:01    [W:0.184 / U:0.088 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site