Re: [AppArmor 39/45] AppArmor: Profile loading and manipulation,pathname matching

From: Sean
Date: Sat Jun 09 2007 - 04:11:58 EST


On Sat, 9 Jun 2007 01:06:09 -0700 (PDT)
david@xxxxxxx wrote:


> but the SELinux API's are not the core security API's in Linux, the LSM
> API's are. and AA is useing the LSM API's (extending them where they and
> SELinux don't do what's needed)
>

Calling LSM "core" and pretending that SELinux can't do 90% of what you
want doesn't change the facts on the ground. Clinging to the current AA
implementation instead of honestly considering reasonable alternatives
does not inspire confidence or teamwork.

Sean.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/