linux-kernel - Re: [PATCH] security: Yama LSM

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20100623062242.GG5876@outflux.net>
Date:	Tue, 22 Jun 2010 23:22:42 -0700
From:	Kees Cook <kees.cook@...onical.com>
To:	Christian Stroetmann <stroetmann@...olinux.com>
Cc:	Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
	Linux File System ML <linux-fsdevel@...r.kernel.org>,
	Linux Security Module ML 
	<linux-security-module@...r.kernel.org>
Subject: Re: [PATCH] security: Yama LSM

On Wed, Jun 23, 2010 at 08:03:08AM +0200, Christian Stroetmann wrote:
> "You've already had those suggestions some days ago. Use a security
> module, either by using something like SELinux (where you can do
> this just fine as far as I can see including exceptions by label for
> problem apps)", [Alan Cox, 2010-06-08], or integrate it into an
> already existing solution eg. grsecurity (www.grsecurity.net).

You appear to be quoting[1], but you left off a bit.  To edit it a bit:

  "Use a security module, either by using something like SELinux (...),
  or write your own little security module that does it."

I have done the latter.

I don't need to integrate this into grsecurity because grsecurity already
has these protections.  It is Openwall and grsecurity that I'm using as the
starting point for this attempt at upstreaming the protections.

-Kees

[1] http://lkml.org/lkml/2010/6/8/56

-- 
Kees Cook
Ubuntu Security Team
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/