Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1755681AbYGPEQR (ORCPT ); Wed, 16 Jul 2008 00:16:17 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1751200AbYGPEQD (ORCPT ); Wed, 16 Jul 2008 00:16:03 -0400 Received: from ax54.genwebserver.com ([72.18.156.50]:44467 "EHLO ax54.genwebserver.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751019AbYGPEQC (ORCPT ); Wed, 16 Jul 2008 00:16:02 -0400 Message-ID: <487D756E.50506@assumpcao.org> Date: Wed, 16 Jul 2008 01:13:34 -0300 From: Tiago Assumpcao User-Agent: Thunderbird 2.0.0.14 (Windows/20080421) MIME-Version: 1.0 To: Casey Schaufler CC: Theodore Tso , Linus Torvalds , pageexec@freemail.hu, Greg KH , Andrew Morton , linux-kernel@vger.kernel.org, stable@kernel.org Subject: Re: [stable] Linux 2.6.25.10 References: <487D3C17.31467.1C3C0441@pageexec.freemail.hu> <487D3A13.3040507@assumpcao.org> <20080716010836.GL8185@mit.edu> <487D547C.7060909@assumpcao.org> <487D6AB9.7080700@schaufler-ca.com> In-Reply-To: <487D6AB9.7080700@schaufler-ca.com> X-Enigmail-Version: 0.95.6 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - ax54.genwebserver.com X-AntiAbuse: Original Domain - vger.kernel.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - assumpcao.org X-Source: X-Source-Args: X-Source-Dir: Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1043 Lines: 26 Casey Schaufler wrote: > Ted Tso, Stephen Smalley and I are all recognized as security experts > and we can't even agree on whether sockets are objects or not, much > less what constitutes a security bug and even less what is likely to > be a security bug. Goodness, there are some of us who would argue > that since DNS is itself a security bug it is just not possible for > DNS to have a security bug, as an example. > >> In most cases, they are easy to spot. > > Err, no, in the kernel environment a real security flaw is likely to > be pretty subtle. You do not hesitate in categorizing yourself as something as obscure as... what's that term again? "Expert". But then you fail on basic pragmatism when attempting to define what, nearly always, is a true or false question? Jeez ;) --t -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/