Home » Mailing list archives » linux-kernel » 2007 » November » 10

Re: AppArmor Security Goal

!MAILaRCHIVE_VOTE_RePLACE
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
[view in full thread]
From: Alan Cox <alan@...>
To: Crispin Cowan <crispin@...>
Cc: Dr. David Alan Gilbert <linux@...>, Arjan van de Ven <arjan@...>, Linux Kernel Mailing List <linux-kernel@...>, LSM ML <linux-security-module@...>, apparmor-dev <apparmor-dev@...>
Subject: Re: AppArmor Security Goal
Date: Saturday, November 10, 2007 - 7:54 pm

> I submit that the AppArmor model is valid, even if it totally failed all

The model looks valid. I have difficulty constructing many scenarios
where its useful but it appears valid providing you can tightly control
file renaming, which is very very questionable.

There are also some very awkward path based issues around shared file
objects (your controlling tty and TIOCSTI for one) that I need to look at
the code for once the VFS stuff is sorted and its likely to get merged.

Alan
-
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
Messages in current thread:
AppArmor Security Goal, Crispin Cowan, (Thu Nov 8, 5:33 pm)
Re: AppArmor Security Goal, Andi Kleen, (Sat Nov 10, 5:04 pm)
Re: AppArmor Security Goal, , (Sat Nov 10, 5:28 pm)
Re: AppArmor Security Goal, John Johansen, (Sat Nov 10, 11:36 pm)
Re: AppArmor Security Goal, Crispin Cowan, (Sat Nov 10, 5:24 pm)
Re: AppArmor Security Goal, John Johansen, (Sat Nov 10, 11:23 pm)
Re: AppArmor Security Goal, Dr. David Alan Gilbert, (Sat Nov 10, 6:04 pm)
Re: AppArmor Security Goal, Crispin Cowan, (Sat Nov 10, 6:11 pm)
Re: AppArmor Security Goal, Dr. David Alan Gilbert, (Sat Nov 10, 6:24 pm)
Re: AppArmor Security Goal, Crispin Cowan, (Sat Nov 10, 6:41 pm)
Re: AppArmor Security Goal, Casey Schaufler, (Sat Nov 10, 10:17 pm)
Re: AppArmor Security Goal, Joshua Brindle, (Mon Nov 12, 8:10 pm)
Re: AppArmor Security Goal, Casey Schaufler, (Tue Nov 13, 12:58 am)
Re: AppArmor Security Goal, John Johansen, (Sat Nov 10, 11:55 pm)
Re: AppArmor Security Goal, Dr. David Alan Gilbert, (Sat Nov 10, 7:25 pm)
Re: AppArmor Security Goal, Crispin Cowan, (Mon Nov 12, 7:50 pm)
Re: AppArmor Security Goal, John Johansen, (Mon Nov 12, 9:20 pm)
Re: AppArmor Security Goal, Rogelio M. Serrano Jr., (Sun Nov 11, 3:02 am)
Re: AppArmor Security Goal, , (Sat Nov 10, 7:52 pm)
Re: AppArmor Security Goal, Crispin Cowan, (Mon Nov 12, 8:13 pm)
Re: AppArmor Security Goal, John Johansen, (Sun Nov 11, 12:17 am)
Re: AppArmor Security Goal, , (Sun Nov 11, 12:50 am)
Re: AppArmor Security Goal, Alan Cox, (Sat Nov 10, 7:56 pm)
Re: AppArmor Security Goal, Crispin Cowan, (Mon Nov 12, 7:58 pm)
Re: AppArmor Security Goal, , (Sat Nov 10, 9:27 pm)
Re: AppArmor Security Goal, John Johansen, (Sat Nov 10, 11:59 pm)
Re: AppArmor Security Goal, Dr. David Alan Gilbert, (Sat Nov 10, 7:47 pm)
Re: AppArmor Security Goal, Alan Cox, (Sat Nov 10, 6:57 pm)
Re: AppArmor Security Goal, Crispin Cowan, (Sat Nov 10, 7:14 pm)
Re: AppArmor Security Goal, Alan Cox, (Sat Nov 10, 7:54 pm)