ljknews wrote:

On most important systems there is no need for the users to be able
to provide executable which they then run. Executables are provided
by the system manager.


While I am sympathetic to this point of view, it is no longer relevant to the modern context, where many data formats end up being executable, e.g. Office documents with executable macros in them.

Securing a MAC system in which the users are hog-tied is easy. The trick is to provide reasonable security *and* reasonable usability.

Crispin

--
Crispin Cowan, Ph.D.  http://immunix.com/~crispin/
CTO, Immunix          http://immunix.com




Reply via email to