Re: Changes to LSM phase 1 for audit.

Previous message: David Wagner: "Re: Changes to LSM phase 1 for audit."
In reply to: Jesse Pollard: "Re: Changes to LSM phase 1 for audit."
Next in thread: jmjonesat_private: "Re: Changes to LSM phase 1 for audit."
Next in thread: richard offer: "Re: Changes to LSM phase 1 for audit."
Reply: jmjonesat_private: "Re: Changes to LSM phase 1 for audit."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

dawat_private

Jesse Pollard  wrote:
>All of the systems I've used have MAC evaluated before DAC. [...]
>It's also a bit more efficient for denial - [...]

Why does the efficiency of denied requests matter?
I couldn't think of any reason why we would want to optimize
the performance of illegal operations.  What am I missing?

_______________________________________________
linux-security-module mailing list
linux-security-moduleat_private
http://mail.wirex.com/mailman/listinfo/linux-security-module