Re: Making forward progress

From: Crispin Cowan (crispinat_private)
Date: Fri Aug 03 2001 - 16:55:51 PDT

  • Next message: richard offer: "Re: File descriptors: LSM should support them in phase 1."

    Valdis.Kletnieksat_private wrote:
    
    > On Fri, 03 Aug 2001 12:25:40 EDT, Stephen Smalley said:
    > > NFSv4 seems clearly out of scope for LSM.
    > Umm... "clearly"?
    >
    > Are you prepared to tell the customers down the road "You can use NFSv4, or
    > you can use LSM, but you can't get LSM support for securing NFSv4 because the
    > LSM folks thought NFSv4 was clearly out of scope?"
    >
    > If NFSv4 is *clearly* out of scope, I'll propose that the networking hooks
    > are out of scope too.  After all, anybody who cares about security doesn't
    > hook their boxes up to the wire, right? ;)
    
    Can someone summarize the alleged scary boodjum of NFSv4?  I'm not familiar
    with it, and don't know what the implications of it are that LSM would have to
    care about.
    
    Crispin
    
    --
    Crispin Cowan, Ph.D.
    Chief Scientist, WireX Communications, Inc. http://wirex.com
    Security Hardened Linux Distribution:       http://immunix.org
    Available for purchase: http://wirex.com/Products/Immunix/purchase.html
    
    
    _______________________________________________
    linux-security-module mailing list
    linux-security-moduleat_private
    http://mail.wirex.com/mailman/listinfo/linux-security-module
    



    This archive was generated by hypermail 2b30 : Fri Aug 03 2001 - 16:57:26 PDT