To: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Cc: serue@us.ibm.com, linux-security-module@vger.kernel.org,
       linux-kernel@vger.kernel.org
Subject: Re: TOMOYO Linux Security Goal
In-Reply-To: Your message of "Fri, 28 Dec 2007 23:32:09 +0900."
             <200712282332.EGC57888.OFFQHJOLVSMtFO@I-love.SAKURA.ne.jp>
From: Valdis.Kletnieks@vt.edu
References: <200712252133.JFF05267.FOMFtOLJHSOVFQ@I-love.SAKURA.ne.jp> <20071226164230.GA14210@sergelap.austin.ibm.com> <200712272200.IIJ73936.OHOFFLMOQJVFtS@I-love.SAKURA.ne.jp> <20071227145431.GB5161@sergelap.austin.ibm.com>
            <200712282332.EGC57888.OFFQHJOLVSMtFO@I-love.SAKURA.ne.jp>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="==_Exmh_1198862631_2814P";
	 micalg=pgp-sha1; protocol="application/pgp-signature"
Content-Transfer-Encoding: 7bit
Date: Fri, 28 Dec 2007 12:23:51 -0500
Message-ID: <27904.1198862631@turing-police.cc.vt.edu>
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 1644
Lines: 41

--==_Exmh_1198862631_2814P
Content-Type: text/plain; charset=us-ascii

On Fri, 28 Dec 2007 23:32:09 +0900, Tetsuo Handa said:

> You can run your system with only policy collected by learning mode.
> Thus, you basically don't need manual intervention.
> But since there are randomly named files (i.e. temporary files),
> you pay a little time to modify policy.
> 
> The learning mode is to save time for permitting commonly accessed resources.
> Administrator reviews policy collected by learning mode. Thus the readability
> of policy is important so that administrator can understand what he/she is
> going to allow or reject.

Please make a *big* notation someplace that "learning mode" is quite likely to
*not* produce a totally correct policy.  In particular, it won't build rules for
infrequently used code paths (such as error handling) unless you find a way to
exercise those paths while in learning mode.

Particularly fun - when learning mode doesn't create an entry for the logfile
for I/O errors.  Then when one actually happens, you have no idea what it was...

--==_Exmh_1198862631_2814P
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001

iD8DBQFHdTEncC3lWbTT17ARAkHdAKDa9YMx7omJmf3X65VtDwHCZN9RRwCfVcN+
+oUDp62n2NG5a265pDaG5EI=
=P215
-----END PGP SIGNATURE-----

--==_Exmh_1198862631_2814P--
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/