Home » Mailing list archives » linux-kernel » 2007 » October » 8

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Kernel

!MAILaRCHIVE_VOTE_RePLACE
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
[view in full thread]
From: Casey Schaufler <casey@...>
To: Eric W. Biederman <ebiederm@...>, Stephen Smalley <sds@...>
Cc: <casey@...>, Kyle Moffett <mrmacman_g4@...>, Linus Torvalds <torvalds@...>, Bill Davidsen <davidsen@...>, James Morris <jmorris@...>, Andrew Morton <akpm@...>, <linux-security-module@...>, <linux-kernel@...>, Serge E. Hallyn <serge@...>
Subject: Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Kernel
Date: Monday, October 8, 2007 - 1:50 pm

--- "Eric W. Biederman" <ebiederm@xmission.com> wrote:



Gulp. I know that many of you are granularity advocates, but I
have to say that security derived by tweeking 1000 knobs so that
they are all just right seems a little far fetched to me. I see
it as poopooing the 3rd and most important part of the reference
monitor concept, "small enough to analyze". Sure, you can analyse
the 1000 individual checks, but you'll never be able to describe
the system behavior as a whole.


Casey Schaufler
casey@schaufler-ca.com
-
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
Messages in current thread:
[PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory A..., Casey Schaufler, (Sat Sep 29, 8:20 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Serge E. Hallyn, (Sun Sep 30, 11:47 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 1, 12:15 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Andrew Morton, (Sun Sep 30, 4:16 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Jan Engelhardt, (Mon Oct 1, 4:49 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., James Morris, (Mon Oct 1, 7:33 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 1, 11:38 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Linus Torvalds, (Mon Oct 1, 11:07 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Stephen Smalley, (Mon Oct 1, 11:40 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Theodore Tso, (Mon Oct 1, 3:00 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 1, 12:39 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Linus Torvalds, (Mon Oct 1, 12:04 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Bill Davidsen, (Tue Oct 2, 5:02 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Alan Cox, (Tue Oct 2, 8:10 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Linus Torvalds, (Tue Oct 2, 8:18 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Linus Torvalds, (Tue Oct 2, 5:20 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Bill Davidsen, (Tue Oct 2, 11:54 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Linus Torvalds, (Wed Oct 3, 12:52 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Thu Oct 4, 9:44 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Kyle Moffett, (Thu Oct 4, 11:04 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Bill Davidsen, (Sat Oct 6, 3:14 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Fri Oct 5, 12:45 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Serge E. Hallyn, (Mon Oct 8, 12:06 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Mon Oct 8, 1:20 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 8, 4:25 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Mon Oct 8, 4:57 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Serge E. Hallyn, (Mon Oct 8, 2:00 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Kazuki Omo(Company), (Tue Oct 30, 12:01 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Tue Oct 30, 11:07 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Mon Oct 8, 3:50 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Crispin Cowan, (Mon Oct 8, 5:51 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Alan Cox, (Mon Oct 8, 5:20 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Wed Oct 10, 9:48 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Stephen Smalley, (Wed Oct 10, 11:45 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Wed Oct 10, 1:57 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Kyle Moffett, (Thu Oct 11, 6:46 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Thu Oct 11, 11:41 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Kyle Moffett, (Thu Oct 11, 2:53 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Alan Cox, (Thu Oct 11, 4:09 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 8, 4:39 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Mon Oct 8, 5:02 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Mon Oct 8, 3:29 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Kyle Moffett, (Fri Oct 5, 1:48 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Fri Oct 5, 12:27 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Serge E. Hallyn, (Mon Oct 8, 12:18 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Bill Davidsen, (Mon Oct 8, 7:24 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 8, 1:31 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Stephen Smalley, (Tue Oct 9, 9:52 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Tue Oct 9, 12:02 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Stephen Smalley, (Fri Oct 5, 2:42 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Fri Oct 5, 4:11 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 8, 1:50 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Mon Oct 8, 2:47 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 8, 5:05 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Serge E. Hallyn, (Mon Oct 8, 2:53 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Fri Oct 5, 4:08 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Linus Torvalds, (Tue Oct 2, 7:25 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Crispin Cowan, (Wed Oct 3, 1:32 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Alan Cox, (Tue Oct 2, 8:12 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Derek Fawcus, (Thu Oct 4, 6:56 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Chuck Ebbert, (Thu Oct 4, 7:18 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Derek Fawcus, (Thu Oct 4, 7:44 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Olivier Galibert, (Mon Oct 1, 1:54 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Paul Moore, (Sun Sep 30, 4:30 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Sun Sep 30, 1:02 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Andi Kleen, (Sun Sep 30, 4:42 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Sun Sep 30, 1:14 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Andi Kleen, (Sun Sep 30, 1:34 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., , (Sun Sep 30, 7:24 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Joshua Brindle, (Sun Sep 30, 1:29 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Andi Kleen, (Sun Sep 30, 1:39 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Theodore Tso, (Sun Sep 30, 3:07 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Paul Moore, (Sun Sep 30, 4:18 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Andi Kleen, (Sun Sep 30, 4:05 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 1, 4:28 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Theodore Tso, (Sun Sep 30, 4:22 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Christoph Hellwig, (Sun Sep 30, 5:53 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Thomas Bleher, (Tue Oct 2, 4:36 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Sun Sep 30, 1:19 pm)