Re: Current/Future Plans to Support Stacking LSM Modules

[Casey Schaufler <casey@schaufler-ca.com>]

--- Stephen Smalley <sds@tycho.nsa.gov> wrote:


> To the contrary, the LSPP work significantly
> leverages the work already
> done to integrate SELinux and makes use of the
> SELinux interfaces for
> applications.  It also leverages SELinux TE to
> address aspects such as
> MLS overrides.  By doing it within the context of
> SELinux, it gained the
> benefit of a unified security model and interface. 
> Which one doesn't get from LSM.

There are others who would argue that SELinux
has abandoned the Linux privilege model and
thus disrupted the unity of the existing
security model.

I don't understand why the SELinux crew seems
so intent on making it difficult to implement
alternatives. Last year it was "let's ditch LSM".
Now it's "Everyone hates stacking". Give it a
rest already.


Casey Schaufler
casey@schaufler-ca.com

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.