Re: Selinux kernel patches

[Dale Amon <amon@vnl.com>]

On Tue, Feb 06, 2001 at 03:28:44PM -0500, Pete Loscocco wrote:
> We think that we have a good architecture and that it warrants
> consideration. We have put it out not as a complete solution but as
> something that should be built upon. Inclusion in the "standard"
> sources would really enable a much wider audience to work with the
> system, gain experience using the security features, and make the
> system better.
> 

Just a wild suggestion. When things are well along and
everyone thinks the system is ready, why not put a box
out on a public network for a game of "capture the flag"?

Offer a free T-shirt "I cracked the NSA" to anyone who
succeeds *and* tells precisely how it was done. Set up
tests for system cracks both from fully external or from
various shell access levels. Certainly a way of catching
any more egregious faults and as a means of building 
confidence that the system has succeeded in accomplishing
its' goal.

Of course the real test is a few thousand computers under
a few years of real operational conditions. But a bit
of initial testing never hurt :-)

I know I'd sleep better at night if I knew from the
start that the kiddies were blocked cold from my
customers systems.

-- 
------------------------------------------------------
Use Linux: A computer        Dale Amon, CEO/MD
is a terrible thing          Village Networking Ltd
to waste.                    Belfast, Northern Ireland
------------------------------------------------------

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.