linux-kernel - Re: Friendlier EPERM

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:	Sun, 27 Jan 2013 09:16:39 -0500
From:	Rich Kulawiec <rsk@....org>
To:	linux-kernel@...r.kernel.org
Cc:	Eric Paris <eparis@...hat.com>
Subject: Re: Friendlier EPERM - Request for input

On Thu, Jan 10, 2013 at 11:34:39AM -0500, Eric Paris wrote:
> This is not the point I am arguing.  This is not about LSMs, how hard
> they are to configure, or how to 'fix' them.  It certainly isn't about
> how one LSM is better, easier, or superior to another.  This is about
> getting more information in userspace when operations fail.  I'll quote
> an off list e-mail I received:
> 
> Friendlier/more complete error messages would eliminate an awful lot of
> digging around trying to figure *what* the problem is, preparatory to
> discerning *where* the problem is and *how* to fix it.

I know I'm a bit late to this, but Eric's quoting me, and I thought
I should stand behind my words publicly.

I often find myself confronted with systems that I didn't build, haven't
maintained, have no documentation for, and are broken in odd/puzzling
ways.  There's also sometimes a bit of duress due to externally imposed
time constraints.  I of course don't expect anyone else to solve those
problems, but it would be awfully handy if there was a breadcrumb trail
to follow.

So to borrow Eric's phrase, "getting more information in userspace when
operations fail", would be an entirely good thing.  I'll defer entirely to
others in the discussion thread about how that might be best accomplished,
but I'd like to express my full support for the end goal.

---rsk
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/