Re: [RFC][PATCH 0/11] security: AppArmor - Overview

[Casey Schaufler]

--- "Randy.Dunlap" <rdunlap@xxxxxxxxxxxx> wrote:

> use that internet thing, e.g., www.dict.org, and
> look at "conflate".

OK. I am not conflating the policy issues and the
mechanism issue of SELinux. The mechanisms of SELinux
lead to the policy issues. A complete set of policies
for an SELinux system require an unreasonable number
of rules. This violates the Third item of the TCB
principle, which is the the TCB must be small enough
to analyse. The mechanisms are pointless without the
rules.

Conflating my forehead!


Casey Schaufler
casey@xxxxxxxxxxxxxxxx
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/