From mboxrd@z Thu Jan 1 00:00:00 1970 From: Karl MacMillan Subject: Re: AppArmor FAQ Date: Tue, 17 Apr 2007 19:20:59 -0400 Message-ID: <1176852059.5946.128.camel@localhost.localdomain> References: <20070416213350.GB4030@suse.de> <1176822230.3366.65.camel@localhost.localdomain> <462553A9.70504@novell.com> Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit Cc: David Safford , James Morris , John Johansen , linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, linux-fsdevel@vger.kernel.org To: Crispin Cowan Return-path: Received: from mx1.redhat.com ([66.187.233.31]:34134 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752024AbXDQXYY (ORCPT ); Tue, 17 Apr 2007 19:24:24 -0400 In-Reply-To: <462553A9.70504@novell.com> Sender: linux-fsdevel-owner@vger.kernel.org List-Id: linux-fsdevel.vger.kernel.org On Tue, 2007-04-17 at 16:09 -0700, Crispin Cowan wrote: > David Safford wrote: > > On Mon, 2007-04-16 at 20:20 -0400, James Morris wrote: > > > > The meaning of a file is how other processes interpret it. Until then, > /etc/resolv.conf is just a quaint bag of bits. What makes it special is > that it is what each process gets when they open the well-known > "/etc/resolv.conf". Which is why it is useful to guard which processes > can read or write to /etc/resolv.conf; the name is what makes its > content special, not the other way around. > This is not correct. My private ssh keys need to be protected regardless of the file name - it is the "bag of bits" that make it important not the name. Similarly, you protect the integrity of the applications that need name resolution by ensuring that the data that they read is high integrity. You do that by controlling data not the file name used to access the data. That is James point - a comprehensive mechanism like SELinux allows you to comprehensively protect the integrity of data. Karl > Crispin >