Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Kernel | KernelTrap

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Kernel

view
thread

!MAILaRCHIVE_VOTE_RePLACE

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

[view in full thread]

From: Casey Schaufler <casey@...>

To: Eric W. Biederman <ebiederm@...>, Serge E. Hallyn <serge@...>

Cc: Kyle Moffett <mrmacman_g4@...>, Linus Torvalds <torvalds@...>, Bill Davidsen <davidsen@...>, Stephen Smalley <sds@...>, James Morris <jmorris@...>, Andrew Morton <akpm@...>, <casey@...>, <linux-security-module@...>, <linux-kernel@...>

Subject: Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Kernel

Date: Monday, October 8, 2007 - 4:39 pm

--- "Eric W. Biederman" <ebiederm@xmission.com> wrote:


quoted text> My very practical question:  How do I run selinux in one container,
> and SMACK in another?

How would you run PREEMPT_RT in one container, and PREEMPT_DESKTOP
in another? How would you run SMP in one and UP in the other?
One aspect that SELinux and Smack share is that they only really
provide security if all processes involved are under their control,
just like the preemption behavior.

This is not necessarily true of all possible LSMs. In that case it may
be practicle to have different behavior for different containers.


Casey Schaufler
casey@schaufler-ca.com
-
unsubscribe noticeTo unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:

[PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory A..., Casey Schaufler, (Sat Sep 29, 8:20 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Serge E. Hallyn, (Sun Sep 30, 11:47 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 1, 12:15 am)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Andrew Morton, (Sun Sep 30, 4:16 am)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Jan Engelhardt, (Mon Oct 1, 4:49 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., James Morris, (Mon Oct 1, 7:33 am)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 1, 11:38 am)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Linus Torvalds, (Mon Oct 1, 11:07 am)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Stephen Smalley, (Mon Oct 1, 11:40 am)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Theodore Tso, (Mon Oct 1, 3:00 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 1, 12:39 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Linus Torvalds, (Mon Oct 1, 12:04 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Bill Davidsen, (Tue Oct 2, 5:02 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Alan Cox, (Tue Oct 2, 8:10 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Linus Torvalds, (Tue Oct 2, 8:18 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Linus Torvalds, (Tue Oct 2, 5:20 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Bill Davidsen, (Tue Oct 2, 11:54 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Linus Torvalds, (Wed Oct 3, 12:52 am)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Thu Oct 4, 9:44 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Kyle Moffett, (Thu Oct 4, 11:04 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Bill Davidsen, (Sat Oct 6, 3:14 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Fri Oct 5, 12:45 am)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Serge E. Hallyn, (Mon Oct 8, 12:06 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Mon Oct 8, 1:20 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 8, 4:25 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Mon Oct 8, 4:57 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Serge E. Hallyn, (Mon Oct 8, 2:00 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Kazuki Omo(Company), (Tue Oct 30, 12:01 am)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Tue Oct 30, 11:07 am)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Mon Oct 8, 3:50 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Crispin Cowan, (Mon Oct 8, 5:51 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Alan Cox, (Mon Oct 8, 5:20 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Wed Oct 10, 9:48 am)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Stephen Smalley, (Wed Oct 10, 11:45 am)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Wed Oct 10, 1:57 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Kyle Moffett, (Thu Oct 11, 6:46 am)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Thu Oct 11, 11:41 am)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Kyle Moffett, (Thu Oct 11, 2:53 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Alan Cox, (Thu Oct 11, 4:09 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 8, 4:39 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Mon Oct 8, 5:02 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Mon Oct 8, 3:29 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Kyle Moffett, (Fri Oct 5, 1:48 am)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Fri Oct 5, 12:27 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Serge E. Hallyn, (Mon Oct 8, 12:18 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Bill Davidsen, (Mon Oct 8, 7:24 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 8, 1:31 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Stephen Smalley, (Tue Oct 9, 9:52 am)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Tue Oct 9, 12:02 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Stephen Smalley, (Fri Oct 5, 2:42 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Fri Oct 5, 4:11 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 8, 1:50 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Mon Oct 8, 2:47 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 8, 5:05 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Serge E. Hallyn, (Mon Oct 8, 2:53 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Fri Oct 5, 4:08 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Linus Torvalds, (Tue Oct 2, 7:25 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Crispin Cowan, (Wed Oct 3, 1:32 am)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Alan Cox, (Tue Oct 2, 8:12 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Derek Fawcus, (Thu Oct 4, 6:56 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Chuck Ebbert, (Thu Oct 4, 7:18 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Derek Fawcus, (Thu Oct 4, 7:44 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Olivier Galibert, (Mon Oct 1, 1:54 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Paul Moore, (Sun Sep 30, 4:30 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Sun Sep 30, 1:02 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Andi Kleen, (Sun Sep 30, 4:42 am)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Sun Sep 30, 1:14 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Andi Kleen, (Sun Sep 30, 1:34 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., , (Sun Sep 30, 7:24 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Joshua Brindle, (Sun Sep 30, 1:29 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Andi Kleen, (Sun Sep 30, 1:39 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Theodore Tso, (Sun Sep 30, 3:07 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Paul Moore, (Sun Sep 30, 4:18 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Andi Kleen, (Sun Sep 30, 4:05 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 1, 4:28 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Theodore Tso, (Sun Sep 30, 4:22 pm)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Christoph Hellwig, (Sun Sep 30, 5:53 am)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Thomas Bleher, (Tue Oct 2, 4:36 am)

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Sun Sep 30, 1:19 pm)

Navigation

Popular discussions


linux-kernel:
david	Re: Dual-Licensing Linux Kernel with GPL V2 and GPL V3
Bart Van Assche	Integration of SCST in the mainstream Linux kernel
Greg KH	[GIT PATCH] driver core patches against 2.6.24
Heiko Carstens	Re: -mm merge plans for 2.6.23 -- sys_fallocate
git:

linux-netdev:
David Miller	Re: [GIT]: Networking
Jarek Poplawski	[PATCH] pkt_sched: Destroy gen estimators under rtnl_lock().
Gerrit Renker	[PATCH 05/37] dccp: Cleanup routines for feature negotiation
Lennert Buytenhek	[PATCH 16/39] mv643xx_eth: get rid of ETH_/ethernet_/eth_ prefixes
openbsd-misc:

Colocation donated by:

Who's online

There are currently 4 users and 723 guests online.

Online users

Syndicate