Re: TOMOYO Linux Security Goal

2007-12-29 Thread Valdis . Kletnieks
On Sun, 30 Dec 2007 14:29:50 +0900, Tetsuo Handa said: Use of learning mode is independent from correct policy. My point *exactly*. The learning mode merely takes your duty of appending permissions to policy. We can develop and share procedures for how to exercise infrequently used code

Re: [PATCH] Smack: Simplified Mandatory Access Control Kernel

2007-08-19 Thread Valdis . Kletnieks
On Sat, 18 Aug 2007 01:29:58 EDT, Kyle Moffett said: XFCE. If you can show me a security system other than SELinux which is sufficiently flexible to secure those 2 million lines of code along with the other 50 million lines of code found in various pieces of software on my Debian box

Re: [AppArmor 01/41] Pass struct vfsmount to the inode_create LSM hook

2007-05-29 Thread Valdis . Kletnieks
On Mon, 28 May 2007 21:54:46 EDT, Kyle Moffett said: Average users are not supposed to be writing security policy. To be honest, even average-level system administrators should not be writing security policy. It's OK for such sysadmins to tweak existing policy to give access to