On Tue, Mar 28, 2006 at 05:36:41PM +0000, Robert Watson wrote:
quoted text
> If anyone interested in this discussion is going to be at BSDCan, it woul=
d=20
quoted text
> be great to have a BOF session on pluggable security frameworks.  Having=
=20
quoted text
> done work with a number of them (RSBAC, LSM, FLASK, TrustedBSD MAC=20
> Framework, kauth), I feel like I have something to say on the topic, but=
=20
quoted text
> also feel the last word hasn't yet been said -- these frameworks all have=
=20
quoted text
> different properties, making some things easier, and some things harder. =
=20
=20
Thankyou very much for your insightful and constructive
contributions. You bring perspective not only from practical
implementation and deployment, but also simply of the "bigger picture"
a suitable distance from the tangle of the immediate discussion.  This
wisdom is VERY welcome indeed.

I'm quite sure there's interest and value in commonality in these
frameworks; in addition to the pros and cons of each, the complexity
of the landscape weakens the chances of success for any of them.
=20
--=20
Dan.=20