linux-kernel - Re: [RFC 0/5] [TALPA] Intro to a linux interface for on access scanning

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <489A4686.4080700@schaufler-ca.com>
Date:	Wed, 06 Aug 2008 17:49:10 -0700
From:	Casey Schaufler <casey@...aufler-ca.com>
To:	Paul Moore <paul.moore@...com>
CC:	Cliffe <cliffe@...net>, Eric Paris <eparis@...hat.com>,
	malware-list@...ts.printk.net, linux-kernel@...r.kernel.org,
	linux-security-module@...r.kernel.org
Subject: Re: [RFC 0/5] [TALPA] Intro to a linux interface for on access scanning

Paul Moore wrote:
> With multiple security markings on an entity then you have to decide if 
> you want to consider every marking at each LSM instance, or a subset.  
> The complexity in this case does go up dramatically, but I think the 
> key point for our discussion is that it doesn't matter if the entity is 
> a file or a packet.
>
>   

Perhaps you're right. I'm thinking in terms of the notion that each
LSM can have an independent file system attribute, but if they all
want to use IP options we're talking about a very limited resource.
No real biggie, I mostly wanted to point out that there's more to
stacking than fetching multiple xattrs.

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/