Re: [rsbac] Thoughts on the "No Linux Security Modules framework" old claims

From: Casey Schaufler (casey@schaufler-ca.com)
Date: Tue Feb 22 2005 - 07:23:00 PST


--- Amon Ott <ao@private> wrote:

> On Montag 21 Februar 2005 18:50, Casey Schaufler
> wrote:
> > 
> > --- Lorenzo Hernández García-Hierro
> <lorenzo@private>
> > wrote:
> > 
> > 
> > > > There are cases where Linux DAC and MAC cannot
> > > live happily together, 
> > > > because Linux DAC is too limited.
> > > 
> > > Agreed.
> > 
> > OKay, I'll bite. MAC and DAC are seperate.
> > How is it that (the limited nature of) the DAC
> > behavior makes a system with both unhappy?
> 
> Back in 2001/2002 (versions 1.1.2 and 1.2.0), I
> added DAC disabling 
> support first for the full filesystem ...

There's way to much context missing for
me to make heads or tails of what the issue
was!


=====
Casey Schaufler
casey@schaufler-ca.com

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 



This archive was generated by hypermail 2.1.3 : Tue Feb 22 2005 - 07:23:55 PST