Re: Legitimate Question

From: Casey Schaufler (caseyat_private)
Date: Mon Jan 28 2002 - 09:38:30 PST

  • Next message: Crispin Cowan: "Re: Legitimate Question"

    Kurt Seifried wrote:
    
    > Otherwise what is the point of having LSM at all if we start allowing apps
    > full system access (i.e. root access as is currently implemented on most
    > stock unix systems)?
    
    As I'm already a heretic (Bring Back Bumper 3!) I can suggest
    a solution. Enforce policy on a per-task basis. Assign a "sure,
    go ahead" policy to the installation process.
    
    -- 
    
    Casey Schaufler				Manager, Trust Technology, SGI
    caseyat_private				voice: 650.933.1634
    casey_pat_private			Pager: 888.220.0607
    _______________________________________________
    linux-security-module mailing list
    linux-security-moduleat_private
    http://mail.wirex.com/mailman/listinfo/linux-security-module
    



    This archive was generated by hypermail 2b30 : Mon Jan 28 2002 - 09:41:32 PST