Re: [rsbac] Thoughts on the "No Linux Security Modules framework" old claims

From: Casey Schaufler
Date: Tue Feb 22 2005 - 10:25:12 EST



--- Amon Ott <ao@xxxxxxxxx> wrote:

> On Montag 21 Februar 2005 18:50, Casey Schaufler
> wrote:
> >
> > --- Lorenzo Hernández García-Hierro
> <lorenzo@xxxxxxx>
> > wrote:
> >
> >
> > > > There are cases where Linux DAC and MAC cannot
> > > live happily together,
> > > > because Linux DAC is too limited.
> > >
> > > Agreed.
> >
> > OKay, I'll bite. MAC and DAC are seperate.
> > How is it that (the limited nature of) the DAC
> > behavior makes a system with both unhappy?
>
> Back in 2001/2002 (versions 1.1.2 and 1.2.0), I
> added DAC disabling
> support first for the full filesystem ...

There's way to much context missing for
me to make heads or tails of what the issue
was!


=====
Casey Schaufler
casey@xxxxxxxxxxxxxxxx

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/