Home » Mailing list archives » linux-kernel » 2007 » October » 8

Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Kernel

!MAILaRCHIVE_VOTE_RePLACE
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
[view in full thread]
From: Crispin Cowan <crispin@...>
To: Eric W. Biederman <ebiederm@...>
Cc: Serge E. Hallyn <serge@...>, Kyle Moffett <mrmacman_g4@...>, Linus Torvalds <torvalds@...>, Bill Davidsen <davidsen@...>, Stephen Smalley <sds@...>, James Morris <jmorris@...>, Andrew Morton <akpm@...>, <casey@...>, <linux-security-module@...>, <linux-kernel@...>
Subject: Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Kernel
Date: Monday, October 8, 2007 - 5:51 pm

Eric W. Biederman wrote:
In AppArmor, we plan to 'containerize' (not sure what to call it) policy
so that you can have an AppArmor policy per container. This is not
currently the case, it is just the direction we want to go. We think it
would be very useful for virtual hosts to be able to have their own
AppArmor policy, independent of what other hosts are doing.

The major step towards this goal so far is that AppArmor rules are now
canonicalized to the name space.

However, I have never considered the idea of separate LSM modules per
container. The idea doesn't really make sense to me. It is kind of like
asking for private device drivers, or even a private kernel, per name
space. If that's what you want, use virtualization like KVM, Xen, or VMware.

Crispin

-- 
Crispin Cowan, Ph.D.               http://crispincowan.com/~crispin/
	       Itanium. Vista. GPLv3. Complexity at work

-
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
Messages in current thread:
[PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory A..., Casey Schaufler, (Sat Sep 29, 8:20 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Serge E. Hallyn, (Sun Sep 30, 11:47 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 1, 12:15 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Andrew Morton, (Sun Sep 30, 4:16 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Jan Engelhardt, (Mon Oct 1, 4:49 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., James Morris, (Mon Oct 1, 7:33 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 1, 11:38 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Linus Torvalds, (Mon Oct 1, 11:07 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Stephen Smalley, (Mon Oct 1, 11:40 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Theodore Tso, (Mon Oct 1, 3:00 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 1, 12:39 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Linus Torvalds, (Mon Oct 1, 12:04 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Bill Davidsen, (Tue Oct 2, 5:02 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Alan Cox, (Tue Oct 2, 8:10 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Linus Torvalds, (Tue Oct 2, 8:18 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Linus Torvalds, (Tue Oct 2, 5:20 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Bill Davidsen, (Tue Oct 2, 11:54 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Linus Torvalds, (Wed Oct 3, 12:52 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Thu Oct 4, 9:44 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Kyle Moffett, (Thu Oct 4, 11:04 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Bill Davidsen, (Sat Oct 6, 3:14 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Fri Oct 5, 12:45 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Serge E. Hallyn, (Mon Oct 8, 12:06 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Mon Oct 8, 1:20 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 8, 4:25 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Mon Oct 8, 4:57 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Serge E. Hallyn, (Mon Oct 8, 2:00 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Kazuki Omo(Company), (Tue Oct 30, 12:01 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Tue Oct 30, 11:07 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Mon Oct 8, 3:50 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Crispin Cowan, (Mon Oct 8, 5:51 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Alan Cox, (Mon Oct 8, 5:20 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Wed Oct 10, 9:48 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Stephen Smalley, (Wed Oct 10, 11:45 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Wed Oct 10, 1:57 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Kyle Moffett, (Thu Oct 11, 6:46 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Thu Oct 11, 11:41 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Kyle Moffett, (Thu Oct 11, 2:53 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Alan Cox, (Thu Oct 11, 4:09 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 8, 4:39 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Mon Oct 8, 5:02 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Mon Oct 8, 3:29 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Kyle Moffett, (Fri Oct 5, 1:48 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Fri Oct 5, 12:27 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Serge E. Hallyn, (Mon Oct 8, 12:18 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Bill Davidsen, (Mon Oct 8, 7:24 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 8, 1:31 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Stephen Smalley, (Tue Oct 9, 9:52 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Tue Oct 9, 12:02 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Stephen Smalley, (Fri Oct 5, 2:42 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Fri Oct 5, 4:11 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 8, 1:50 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Eric W. Biederman, (Mon Oct 8, 2:47 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 8, 5:05 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Serge E. Hallyn, (Mon Oct 8, 2:53 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Fri Oct 5, 4:08 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Linus Torvalds, (Tue Oct 2, 7:25 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Crispin Cowan, (Wed Oct 3, 1:32 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Alan Cox, (Tue Oct 2, 8:12 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Derek Fawcus, (Thu Oct 4, 6:56 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Chuck Ebbert, (Thu Oct 4, 7:18 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Derek Fawcus, (Thu Oct 4, 7:44 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Olivier Galibert, (Mon Oct 1, 1:54 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Paul Moore, (Sun Sep 30, 4:30 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Sun Sep 30, 1:02 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Andi Kleen, (Sun Sep 30, 4:42 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Sun Sep 30, 1:14 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Andi Kleen, (Sun Sep 30, 1:34 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., , (Sun Sep 30, 7:24 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Joshua Brindle, (Sun Sep 30, 1:29 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Andi Kleen, (Sun Sep 30, 1:39 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Theodore Tso, (Sun Sep 30, 3:07 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Paul Moore, (Sun Sep 30, 4:18 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Andi Kleen, (Sun Sep 30, 4:05 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Mon Oct 1, 4:28 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Theodore Tso, (Sun Sep 30, 4:22 pm)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Christoph Hellwig, (Sun Sep 30, 5:53 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Thomas Bleher, (Tue Oct 2, 4:36 am)
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandato..., Casey Schaufler, (Sun Sep 30, 1:19 pm)