Re: [RFC] Can we somehow avoid infinite execve() loop?

2007-09-10 Thread Crispin Cowan
Tetsuo Handa wrote: >> 1. It is bad to lie to the confined program. If it is not malicious, >> you are just breaking the program. If it is malicious, you are >> merely wounding the malicious program instead of killing it. >> > Thus, a process expecting /bin/sh to run at server_proc

Re: [RFC]selinux: Improving SELinux read/write performance

2007-09-10 Thread Stephen Smalley
On Mon, 2007-09-10 at 10:31 +0900, Yuichi Nakamura wrote: > Next is updated patch. Thanks. Please include the short description of the patch though when re-submitting. > Signed-off-by: Yuichi Nakamura<[EMAIL PROTECTED]> > --- > fs/open.c |5 + > include/linux/secu