Re: [PATCH security-next v4 23/32] selinux: Remove boot parameter

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Kees Cook <keescook@xxxxxxxxxxxx>
Subject: Re: [PATCH security-next v4 23/32] selinux: Remove boot parameter
From: James Morris <jmorris@xxxxxxxxx>
Date: Thu, 4 Oct 2018 07:19:44 +1000 (AEST)
Cc: John Johansen <john.johansen@xxxxxxxxxxxxx>, Jordan Glover <Golden_Miller83@xxxxxxxxxxxxx>, Stephen Smalley <sds@xxxxxxxxxxxxx>, Paul Moore <paul@xxxxxxxxxxxxxx>, Casey Schaufler <casey@xxxxxxxxxxxxxxxx>, Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>, "Schaufler, Casey" <casey.schaufler@xxxxxxxxx>, linux-security-module <linux-security-module@xxxxxxxxxxxxxxx>, Jonathan Corbet <corbet@xxxxxxx>, "open list:DOCUMENTATION" <linux-doc@xxxxxxxxxxxxxxx>, linux-arch <linux-arch@xxxxxxxxxxxxxxx>, LKML <linux-kernel@xxxxxxxxxxxxxxx>
In-reply-to: <CAGXu5jLBHN=YSs3Uh49bBJ1SRA1Km2UUD4j37GJJXiKhQq+KPA@mail.gmail.com>
References: <20181002005505.6112-1-keescook@chromium.org> <CAGXu5jKNzG3rGUAV39D0w4txHRG3H2qU1Z1e_b+03OgycTaWqA@mail.gmail.com> <809f1cfd-077b-ee58-51ba-b22daf46d12b@tycho.nsa.gov> <QpdcE4QSCQKJqDmB2QBEGBlnlioHuRHlM0g5HF8KbHjU1zIUAOjnQ2r9EIMu3m0S2OWNR3_M_TSp_M6CVDqkp6kKuFPUvegsyDPNw1AGju4=@protonmail.ch> <CAGXu5jKqXNbEvPr1axQtGCCnWsGhDgjynW5u326mcx4vZ1oH8g@mail.gmail.com> <abe03d09-4dcb-2b02-4102-5e108d617a42@canonical.com> <CAGXu5jJtC1gkJ0ZKDFroL8UzvjiPfmC+6EsrzyB0j0oETdSQQg@mail.gmail.com> <alpine.LRH.2.21.1810030758460.23596@namei.org> <CAGXu5jLKgrdhah-5TtAXDL-odbLGeyAUH2=PkAU769AkEnZFfQ@mail.gmail.com> <5955f5ce-b803-4f58-8b07-54c291e33da5@canonical.com> <alpine.LRH.2.21.1810040416500.13517@namei.org> <CAGXu5j+oPR58oJ06-n7e96-Rmu+ywTW0hud5LhOZ_3UXG5s12w@mail.gmail.com> <alpine.LRH.2.21.1810040427550.13517@namei.org> <CAGXu5jJmVR4Wsdti=aFaDhCBaxsVu1KTJOdsJOtFvZOV1ZhdvQ@mail.gmail.com> <CAGXu5jLBHN=YSs3Uh49bBJ1SRA1Km2UUD4j37GJJXiKhQq+KPA@mail.gmail.com>
User-agent: Alpine 2.21 (LRH 202 2017-01-01)

On Wed, 3 Oct 2018, Kees Cook wrote:

> I should also note that I don't want to leave CONFIG_DEFAULT_SECURITY
> in, since it's just a way to disable all the other majors.

Right, default doesn't make sense anymore.


-- 
James Morris
<jmorris@xxxxxxxxx>

References:
- [PATCH security-next v4 00/32] LSM: Explict LSM ordering
  - From: Kees Cook
- Re: [PATCH security-next v4 23/32] selinux: Remove boot parameter
  - From: Kees Cook
- Re: [PATCH security-next v4 23/32] selinux: Remove boot parameter
  - From: Stephen Smalley
- Re: [PATCH security-next v4 23/32] selinux: Remove boot parameter
  - From: Jordan Glover
- Re: [PATCH security-next v4 23/32] selinux: Remove boot parameter
  - From: Kees Cook
- Re: [PATCH security-next v4 23/32] selinux: Remove boot parameter
  - From: John Johansen
- Re: [PATCH security-next v4 23/32] selinux: Remove boot parameter
  - From: Kees Cook
- Re: [PATCH security-next v4 23/32] selinux: Remove boot parameter
  - From: James Morris
- Re: [PATCH security-next v4 23/32] selinux: Remove boot parameter
  - From: Kees Cook
- Re: [PATCH security-next v4 23/32] selinux: Remove boot parameter
  - From: John Johansen
- Re: [PATCH security-next v4 23/32] selinux: Remove boot parameter
  - From: James Morris
- Re: [PATCH security-next v4 23/32] selinux: Remove boot parameter
  - From: Kees Cook
- Re: [PATCH security-next v4 23/32] selinux: Remove boot parameter
  - From: James Morris
- Re: [PATCH security-next v4 23/32] selinux: Remove boot parameter
  - From: Kees Cook
- Re: [PATCH security-next v4 23/32] selinux: Remove boot parameter
  - From: Kees Cook

Prev by Date: Re: [PATCH security-next v4 23/32] selinux: Remove boot parameter
Next by Date: Re: [RFC PATCH v4 24/27] mm/mmap: Create a guard area between VMAs
Previous by thread: Re: [PATCH security-next v4 23/32] selinux: Remove boot parameter
Next by thread: Re: [PATCH security-next v4 23/32] selinux: Remove boot parameter
Index(es):
- Date
- Thread

[Index of Archives] [Linux Kernel] [Kernel Newbies] [x86 Platform Driver] [Netdev] [Linux Wireless] [Netfilter] [Bugtraq] [Linux Filesystems] [Yosemite Discussion] [MIPS Linux] [ARM Linux] [Linux Security] [Linux RAID] [Samba] [Device Mapper]