Re: checking exec

From: Stephen Smalley (sdsat_private)
Date: Thu Aug 21 2003 - 14:02:23 PDT

  • Next message: rekwobarat_private: "Re: Re: My details"

    On Thu, 2003-08-21 at 16:47, Brian Pontz wrote:
    > How scalable are those? I'm talking 100K plus
    > directories I need to do this for.
    
    The security policy configuration wouldn't be large, as it just needs to
    deal with security equivalence classes, of which you seem to have two: 
    one that can be executed and one that cannot.  You naturally need to
    assign extended attributes to your files, but that can be done once upon
    setup and then just use inheritance to maintain them on files created
    under each user's home directory.
    
    -- 
    Stephen Smalley <sdsat_private>
    National Security Agency
    
    _______________________________________________
    linux-security-module mailing list
    linux-security-moduleat_private
    http://mail.wirex.com/mailman/listinfo/linux-security-module
    



    This archive was generated by hypermail 2b30 : Thu Aug 21 2003 - 14:03:09 PDT