Re: [PATCH 2/2] Default hooks protecting the XATTR_SECURITY_PREFIX namespace

From: Chris Wright (chrisw@private)
Date: Mon Jan 19 2004 - 10:25:33 PST

Next message: Hans Downs: "Seakret piLL of male X~X~X stars available for you"

Previous message: Theodore Ts'o: "Re: [PATCH 2/2] Default hooks protecting the XATTR_SECURITY_PREFIX namespace"
In reply to: Theodore Ts'o: "Re: [PATCH 2/2] Default hooks protecting the XATTR_SECURITY_PREFIX namespace"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

* Theodore Ts'o (tytso@private) wrote:
> Everyone realizes the protection is minimal, right?  If you boot into

Yes.  This is mostly about default protection where there was none.  Trusting
a default kernel to do all the right things before booting back to a
more secure kernel is indeed risky.

thanks,
-chris
-- 
Linux Security Modules     http://lsm.immunix.org     http://lsm.bkbits.net

Next message: Hans Downs: "Seakret piLL of male X~X~X stars available for you"
Previous message: Theodore Ts'o: "Re: [PATCH 2/2] Default hooks protecting the XATTR_SECURITY_PREFIX namespace"
In reply to: Theodore Ts'o: "Re: [PATCH 2/2] Default hooks protecting the XATTR_SECURITY_PREFIX namespace"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Jan 19 2004 - 10:26:54 PST