Valdis.Kletnieks@private wrote: >And yes, I *KNOW* the Right Answer there is "Use some other LSM that meets the >goals needed". The point is that there *DO* exist *real world* security issues >that the SELinux model is not all that well suited for. > Very well said. The above is the main reason to keep LSM and not replace it with SELinux. The details are an enumeration of the cases where an LSM of some variety will do a better job than an SELinux policy. Crispin -- Crispin Cowan, Ph.D. http://immunix.com/~crispin/ Director of Software Engineering, Novell http://novell.com
This archive was generated by hypermail 2.1.3 : Wed May 25 2005 - 14:37:40 PDT