[rsbac] Against LSM

shahbaz khan shazalive at gmail.com
Wed Sep 5 03:59:15 CEST 2007


Hi Amon,

I would suggest you to read this article. I think it can be easily
used with RSBAC.

-----> http://james-morris.livejournal.com/11010.html

Shaz.

On 8/28/07, Amon Ott <ao at rsbac.org> wrote:
> Hi Shaz!
>
> On Monday 20 August 2007 15:51, shahbaz khan wrote:
> > Thanks for the details. I was studying RSBAC, AppArmor, GrSec and
> > SELinux in the meanwhile when you were on holidays. I am not
> > exagerating but I have fallen in love with RSBAC! Its so neat. The
> > only short comming is that it is not part of the kernel like
> > SELinux and those guys are enjoying with mass debugging and
> > development support. And this is the reason that they have gone
> > ahead with the labeling of networked resources.
>
> Thanks you very much for your encouraging feedback!
>
> > By the way I also found AppArmor people as friendly as you are but
> > SELinux people have an agenda. If you are on their agenda they are
> > helpful but if you propose any ideas they ignore it! I had an
> > argument with Steve about some TE and networking stuff but with all
> > arguments he was not agreeing and Joshua went silent on it.
>
> They probably have their fixed targets from their employers. There is
> a reason why the RSBAC project explicitely states that we are
> independent of big companies and governments.
>
> > I am working on Distributed MAC and will be glad to share my
> > findings with you guys.
>
> Please do so and send such info to the list.
>
> Amon.
> --
> http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22
>


-- 
Shahbaz
IMSciences, Peshawar,
Pakistan.
Group: http://securityengineering.wordpress.com
Email: shazalive at gmail.com
cell: +92 91 0300 5944647


More information about the rsbac mailing list