Re: lsm stacker

From: Casey Schaufler (casey@schaufler-ca.com)
Date: Tue Jul 05 2005 - 08:34:09 PDT


--- Stephen Smalley <sds@private> wrote:

> > Sorry, I'm not going to play that game.
> 
> Then I'll assume your original statement was false.

I said I am not going to play that game.

> > One man's "ad-hoc hack" is another
> > man's "clever solution".
> 
> Possibly, but that doesn't change the
> fact that it isn't suitable for mainline.

It wasn't that long ago that
SELinux had "ad-hoc hack"
status in the community.
With continued exposure and
no small amount of backing
from organizations of
influence the suitability of
SELinux for the main line
has been established. I
humbly submit that other
schemes ought to be allowed
the same opportunities that
have been available to
those behind SELinux.

> See the realtime LSM discussions for a
> case study.  And note
> that the objections to it had nothing to do with
> SELinux.

This is a fine example of your point.

> > > - LSMs that lacked any real users.
> > 
> > You're putting a chicken/egg limit
> > in with that one.
> 
> Not my limit.

Your argument, nonetheless.



Casey Schaufler
casey@schaufler-ca.com

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 



This archive was generated by hypermail 2.1.3 : Tue Jul 05 2005 - 08:36:49 PDT