Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1757060AbXHUJep (ORCPT ); Tue, 21 Aug 2007 05:34:45 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1754045AbXHUJea (ORCPT ); Tue, 21 Aug 2007 05:34:30 -0400 Received: from gprs189-60.eurotel.cz ([160.218.189.60]:55087 "EHLO amd.ucw.cz" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1754239AbXHUJeC (ORCPT ); Tue, 21 Aug 2007 05:34:02 -0400 Date: Tue, 21 Aug 2007 09:37:10 +0200 From: Pavel Machek To: Casey Schaufler Cc: Kyle Moffett , linux-security-module@vger.kernel.org, LKML Kernel Subject: Re: [PATCH] Smack: Simplified Mandatory Access Control Kernel Message-ID: <20070821073710.GB7258@elf.ucw.cz> References: <766922.14722.qm@web36601.mail.mud.yahoo.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <766922.14722.qm@web36601.mail.mud.yahoo.com> X-Warning: Reading this can be dangerous to your mental health. User-Agent: Mutt/1.5.11+cvs20060126 Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1172 Lines: 27 Hi! > > Ergo the only > > people who should be writing security policy for deployment are those > > people who have studied and trained in the stuff. Those people are > > also known as "security professionals". > > If only security professionals can use the system you have failed > to provide a general purpose facility. It may have value in limited > circumstances but it is not for everybody. But that's okay. Maybe SElinux is not simple enough to use for everyone, but that does not mean you can't auto-generate policy from something else, "easy to understand". IOW smack may be great idea, but you written it in wrong language. You written it in C, while you should have written it in SELinux policy language (and your favourite scripting language as frontend). Pavel -- (english) http://www.livejournal.com/~pavelmachek (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/