Re: [ANNOUNCE] UidBind LSM 0.2

2007-04-29 Thread Casey Schaufler
--- Tetsuo Handa [EMAIL PROTECTED] wrote: Casey Schaufler wrote: Putting access control on ports rather than sockets is a novel approach. It is a lot simpler underneath and more consistant with the way other object name spaces are treated. I prefer Novell's approach. It is easy like

Re: [ANNOUNCE] UidBind LSM 0.2

2007-04-25 Thread Roberto De Ioris
Il giorno mar, 24/04/2007 alle 18.11 -0400, Gerhard Mack ha scritto: On Tue, 24 Apr 2007, Casey Schaufler wrote: --- Gerhard Mack [EMAIL PROTECTED] wrote: If you're daring you could propose that low number ports be treated the same way as other ports, with the default ownership being

Re: [ANNOUNCE] UidBind LSM 0.2

2007-04-25 Thread Tetsuo Handa
Hello. Casey Schaufler wrote: Putting access control on ports rather than sockets is a novel approach. It is a lot simpler underneath and more consistant with the way other object name spaces are treated. I prefer Novell's approach. It is easy like using iptables. In TOMOYO Linux, I do in the