Re: [PATCH 5/9] Make use of permissions, returned by kobj_lookup

Casey Schaufler
2008-03-07T17:57:43Z

--- "Serge E. Hallyn" <serue@us.ibm.com> wrote:

> ...
>
> Until user namespaces are complete, selinux seems the only good solution
> to offer isolation.

Smack does it better and cheaper. (Unless you define good==selinux)
(insert smiley)

Casey Schaufler
casey@schaufler-ca.com