Re: BSD Secure levels for linux

[Roberto Nibali <ratz@tac.ch>]

Diyab wrote:
> Has anyone else run across the kernel patch that implements something 
> similar to the BSD secure levels?  Has anyone tried to use this with 
> selinux?  I'm also curious what the general thought of the idea is. Good 
> idea? Bad idea?  What do you think?

A fellow member (jonny) of drugphish.ch has done such an implementation, which 
he called private[1]. It's based on LSM, has a user space control tool and a 
pretty straightforward configuration file. You might want to have a look at it, 
although it's far from being finished.

> Timothy,
> 
> PS. You can find a short note from the author and the actual patch here:
> http://lwn.net/Articles/60096/  There is also a short article about it 
> in the current weekly edition of LWN if you are a subscriber.

Hmm, interesting. We'll look into merging the remaining CAP_* functionalities 
into the 'private' LSM module. Thanks for the pointer.

[1] http://www.drugphish.ch/~jonny/private.html

Best regards,
Roberto Nibali, ratz
-- 
echo '[q]sa[ln0=aln256%Pln256/snlbx]sb3135071790101768542287578439snlbxq' | dc


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.