Re: The disappearing sys_call_table export.

Chuck Ebbert
2003-05-13T01:47:56Z

Alan Cox wrote:

> 1. Base Linux is not C2 certified

That could be fixed... (right?) Filesystems returning data past the
end of what the user wrote might be a big problem though -- this must
be guaranteed even in obscure corner cases.

> 2. C2 is obsolete

Obsolete or not, it is mandatory for some people. No check box,
no purchase order (or no certificate of operation.)

> 3. NSA SELinux can do the needed stuff from scanning the code

But will it get merged?

> 4. Even then data erasure is not guaranteed because of the drive logic

People who really care require the drive be reduced to pieces small
enough to fit through a sieve with ~2mm holes in it before it leaves
their sight. For the rest, overwrite of the swap data is a useful if
not 100% reliable step to take. Legitimate users with servers locked
up in secure areas don't really worry about someone unplugging the box
and walking away with it either.