On Mon, 2010-08-02 at 09:59 -0700, Kees Cook wrote: [...snip] > > I've seen two so far. Both are addressed with a one line fix. And I would > stress that no other existing subsystem in the kernel can provide the same > level of control that my ptrace exception logic provides. SELinux cannot do > this. > Would you mind explaining to me what you believe this patch can do that SELinux can't? Based on what I read in the kconfig entry for the feature and the subsequent exception patch I'm not seeing anything here that SELinux can't do. If there is something we are missing I'd like to understand it so we can make the decision on whether or not our ptrace access control checks need to be modified. Dave -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
