Re: MAC before DAC vs DAC before MAC

From: Greg KH (gregat_private)
Date: Wed Jul 25 2001 - 22:53:48 PDT

  • Next message: richard offer: "Re: MAC before DAC vs DAC before MAC"

    On Wed, Jul 25, 2001 at 05:40:33PM -0700, Crispin Cowan wrote:
    > 
    > That looks like an authoritative hook to me.  Bad logic in the module could
    > result in an override of kernel DAC logic.
    
    Yeah, we really don't want to allow that to happen.  Rats, and I thought
    that looked like a good proposal at first glance.  Good catch.
    
    greg k-h
    
    _______________________________________________
    linux-security-module mailing list
    linux-security-moduleat_private
    http://mail.wirex.com/mailman/listinfo/linux-security-module
    



    This archive was generated by hypermail 2b30 : Wed Jul 25 2001 - 22:55:20 PDT