Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1758094AbZC0Ljw (ORCPT ); Fri, 27 Mar 2009 07:39:52 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1757440AbZC0Lja (ORCPT ); Fri, 27 Mar 2009 07:39:30 -0400 Received: from atrey.karlin.mff.cuni.cz ([195.113.26.193]:47442 "EHLO atrey.karlin.mff.cuni.cz" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1755409AbZC0Lj3 (ORCPT ); Fri, 27 Mar 2009 07:39:29 -0400 Date: Fri, 27 Mar 2009 12:42:24 +0100 From: Pavel Machek To: Bodo Eggert <7eggert@gmx.de> Cc: James Morris , kernel list Subject: Re: TOMOYO in linux-next Message-ID: <20090327114224.GF2585@elf.ucw.cz> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Warning: Reading this can be dangerous to your mental health. User-Agent: Mutt/1.5.18 (2008-05-17) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 850 Lines: 21 On Fri 2009-03-27 10:28:07, Bodo Eggert wrote: > Pavel Machek wrote: > > > I don't think merging that is good idea. Security should be doable > > without making shell-like glob matching... > > How do you suppose a security system should handle mozilla modifying > ~/.bashrc differently from downloading something to ~/pr0n.jpg? How does shell-like glob matching help there? You'd need to parse /etc/passwd to find all ~ directories... Pavel -- (english) http://www.livejournal.com/~pavelmachek (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/