Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751569AbWHXORO (ORCPT ); Thu, 24 Aug 2006 10:17:14 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1751571AbWHXORO (ORCPT ); Thu, 24 Aug 2006 10:17:14 -0400 Received: from e35.co.us.ibm.com ([32.97.110.153]:27279 "EHLO e35.co.us.ibm.com") by vger.kernel.org with ESMTP id S1751567AbWHXORN (ORCPT ); Thu, 24 Aug 2006 10:17:13 -0400 Date: Thu, 24 Aug 2006 09:16:57 -0500 From: "Serge E. Hallyn" To: Benjamin LaHaise Cc: serue@us.ibm.com, Serge E Hallyn , Alan Cox , kjhall@us.ibm.com, linux-kernel , LSM ML , David Safford , Mimi Zohar Subject: Re: [PATCH 3/7] SLIM main patch Message-ID: <20060824141657.GC32764@sergelap.austin.ibm.com> References: <1156359937.6720.66.camel@localhost.localdomain> <20060823192733.GG28594@kvack.org> <1156365357.6720.87.camel@localhost.localdomain> <1156418815.3007.89.camel@localhost.localdomain> <20060824133248.GC15680@sergelap.austin.ibm.com> <20060824133733.GK28594@kvack.org> <20060824135803.GA32764@sergelap.austin.ibm.com> <20060824140043.GL28594@kvack.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20060824140043.GL28594@kvack.org> User-Agent: Mutt/1.5.11 Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1096 Lines: 27 Quoting Benjamin LaHaise (bcrl@kvack.org): > On Thu, Aug 24, 2006 at 08:58:03AM -0500, Serge E. Hallyn wrote: > > Still not certain this is needed. If you were able to write data to a > > pipe, then even though data may be in the buffer, the other end > > shouldn't be able to read it if it's own level were changed. > > Then what is the benefit of the supposed revoke if it can be trivially > bypassed? How is it being bypassed? If it can be shown how what is there is insufficient, then it'll have to be fixed. I'm just not seeing it yet. > Security has not been improved. It is better not to provide > a supposed feature than to offer it up so riddled with holes as to make > it pointless. Some would say it's better to show what you've got, let others point out the faults, and fix them. How else will anything ever get done... -serge - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/