Re: [AppArmor 01/41] Pass struct vfsmount to the inode_create LSM hook

Valdis.Kletnieks
2007-05-27T01:33:34Z

[-- Attachment #1: Type: text/plain, Size: 646 bytes --]

On Sat, 26 May 2007 15:58:50 PDT, Casey Schaufler said:
> Fair enough, I don't believe that an argv[0] check ought to
> be used as a security mechanism. I am not convinced that everyone
> would agree with us.

Having seen my share of argv[0]-related security bugs in my years, I have to
agree that it's a security crock. As to why some might not agree, you already
put your finger on it earlier:

On Fri, 25 May 2007 12:06:19 PDT, Casey Schaufler said:
> nefarious schemes. Remember that security is a subjective thing, and
> using argv[0] and AppArmor together might make some people feel better.

Some people would rather just feel better...

[-- Attachment #2: Type: application/pgp-signature, Size: 226 bytes --]