Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1762446AbYCGR5n (ORCPT ); Fri, 7 Mar 2008 12:57:43 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1752940AbYCGR5g (ORCPT ); Fri, 7 Mar 2008 12:57:36 -0500 Received: from web36608.mail.mud.yahoo.com ([209.191.85.25]:48313 "HELO web36608.mail.mud.yahoo.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with SMTP id S1752212AbYCGR5f (ORCPT ); Fri, 7 Mar 2008 12:57:35 -0500 X-YMail-OSG: 5.YKI6YVM1mUH1BNVHKvvAQK.Y3OMWRXODx2dDgpiuj1RvT8kbVKFXZCcsCpCki0Shiv17hI2Q-- X-RocketYMMF: rancidfat Date: Fri, 7 Mar 2008 09:57:34 -0800 (PST) From: Casey Schaufler Reply-To: casey@schaufler-ca.com Subject: Re: [PATCH 5/9] Make use of permissions, returned by kobj_lookup To: "Serge E. Hallyn" , Greg KH Cc: Pavel Emelyanov , Andrew Morton , linux-kernel@vger.kernel.org, menage@google.com, sukadev@us.ibm.com, serue@us.ibm.com In-Reply-To: <20080307173542.GA2552@sergelap.austin.ibm.com> MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7BIT Message-ID: <757539.74589.qm@web36608.mail.mud.yahoo.com> Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 528 Lines: 20 --- "Serge E. Hallyn" wrote: > ... > > Until user namespaces are complete, selinux seems the only good solution > to offer isolation. Smack does it better and cheaper. (Unless you define good==selinux) (insert smiley) Casey Schaufler casey@schaufler-ca.com -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/