Re: [RFC,PATCH 1/2] seccomp_filters: system call filtering usingBPF
From: James Morris
Date: Thu Jan 12 2012 - 20:34:55 EST
On Thu, 12 Jan 2012, Alan Cox wrote:
> In general I like this approach. It's simple, it's compact and it offers
> interesting possibilities for solving some interesting problem spaces,
> without the full weight of SELinux, SMACK etc which are still needed for
> heavyweight security.
Yes, I can see potential to vastly simplify MAC policy in some cases.
- James
--
James Morris
<jmorris@xxxxxxxxx>
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/