Re: [PATCH] ptrace: allow restriction of ptrace scope

[Theodore Tso]

i think we really need to have stacked LSM's, because there is a large set
of people who will never use SELinux.  Every few years, I take another 
look at SELinux, my head explodes with the (IMHO unneeded complexity),
and I go away again...

Yet I would really like a number of features such as this ptrace scope idea ---
which I think is a useful feature, and it may be that stacking is the only
way we can resolve this debate.   The SELinux people will never believe that
their system is too complicated, and I don't like using things that are impossible
for me to understand or configure, and that doesn't seem likely to change anytime
in the near future.

I mean, even IPSEC RFC's are easier for me to understand, and that's saying
a lot...

-- Ted

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/