Re: Time to remove LSM (was Re: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks)

Alan Cox
2006-04-24T14:21:24Z

On Llu, 2006-04-24 at 09:04 -0500, Serge E. Hallyn wrote:
> Quoting Alan Cox (alan@lxorguk.ukuu.org.uk):
> > Thus this sort of stuff needs to be taken seriously. Can SuSE provide a
> > good reliable policy for AppArmour to people, can Red Hat do the same
> > with SELinux ?
>
> That's a little more than half the question. The other 40% is can users
> write good policies.

Normal users don't write file system allocation policies, they don't
configure the safety systems for their car and they don't generally
configure most other similar policies.