Re: [TOMOYO 14/15] Conditional permission support.

2007-08-28 Thread Tetsuo Handa
Hello. Kyle Moffett wrote: > This is probably not acceptable; I doubt there's a chance in hell > that TOMOYO will get merged as long as it has text-based-language > parsing in the kernel. You also have $NEW_RANDOM_ABUSE_OF_PROCFS and > $PATH_BASED_LSM_ISSUES. See the long flamewars on AppArmor

Re: [TOMOYO 14/15] Conditional permission support.

2007-08-28 Thread Tetsuo Handa
Hello. Kyle Moffett wrote: This is probably not acceptable; I doubt there's a chance in hell that TOMOYO will get merged as long as it has text-based-language parsing in the kernel. You also have $NEW_RANDOM_ABUSE_OF_PROCFS and $PATH_BASED_LSM_ISSUES. See the long flamewars on AppArmor for

Re: [TOMOYO 14/15] Conditional permission support.

2007-08-27 Thread Kyle Moffett
On Aug 25, 2007, at 22:13:48, Tetsuo Handa wrote: Pavel Machek wrote: What is that? Language parser in kernel? Yes. This is a policy parser in kernel. TOMOYO Linux' policy is passed from/to the kernel as a plain text (i.e. ASCII printable) file via /proc/tomoyo interface. For example, to

Re: [TOMOYO 14/15] Conditional permission support.

2007-08-27 Thread Kyle Moffett
On Aug 25, 2007, at 22:13:48, Tetsuo Handa wrote: Pavel Machek wrote: What is that? Language parser in kernel? Yes. This is a policy parser in kernel. TOMOYO Linux' policy is passed from/to the kernel as a plain text (i.e. ASCII printable) file via /proc/tomoyo interface. For example, to

Re: [TOMOYO 14/15] Conditional permission support.

2007-08-25 Thread Tetsuo Handa
Hello. Pavel Machek wrote: > What is that? Language parser in kernel? Yes. This is a policy parser in kernel. TOMOYO Linux' policy is passed from/to the kernel as a plain text (i.e. ASCII printable) file via /proc/tomoyo interface. For example, to add a permission to allow /usr/sbin/sshd to

Re: [TOMOYO 14/15] Conditional permission support.

2007-08-25 Thread Toshiharu Harada
Hi, 2007/8/25, Pavel Machek <[EMAIL PROTECTED]>: > Hi! > > > This patch allows administrators use conditional permission. > > TOMOYO Linux supports conditional permission based on > > process's UID,GID etc. and/or requested pathname's UID/GID. > > > > Signed-off-by: Kentaro Takeda <[EMAIL

Re: [TOMOYO 14/15] Conditional permission support.

2007-08-25 Thread Pavel Machek
Hi! > This patch allows administrators use conditional permission. > TOMOYO Linux supports conditional permission based on > process's UID,GID etc. and/or requested pathname's UID/GID. > > Signed-off-by: Kentaro Takeda <[EMAIL PROTECTED]> > Signed-off-by: Tetsuo Handa <[EMAIL PROTECTED]> > + *

Re: [TOMOYO 14/15] Conditional permission support.

2007-08-25 Thread Pavel Machek
Hi! This patch allows administrators use conditional permission. TOMOYO Linux supports conditional permission based on process's UID,GID etc. and/or requested pathname's UID/GID. Signed-off-by: Kentaro Takeda [EMAIL PROTECTED] Signed-off-by: Tetsuo Handa [EMAIL PROTECTED] + * Since the

Re: [TOMOYO 14/15] Conditional permission support.

2007-08-25 Thread Toshiharu Harada
Hi, 2007/8/25, Pavel Machek [EMAIL PROTECTED]: Hi! This patch allows administrators use conditional permission. TOMOYO Linux supports conditional permission based on process's UID,GID etc. and/or requested pathname's UID/GID. Signed-off-by: Kentaro Takeda [EMAIL PROTECTED]

Re: [TOMOYO 14/15] Conditional permission support.

2007-08-25 Thread Tetsuo Handa
Hello. Pavel Machek wrote: What is that? Language parser in kernel? Yes. This is a policy parser in kernel. TOMOYO Linux' policy is passed from/to the kernel as a plain text (i.e. ASCII printable) file via /proc/tomoyo interface. For example, to add a permission to allow /usr/sbin/sshd to

[TOMOYO 14/15] Conditional permission support.

2007-08-24 Thread Kentaro Takeda
This patch allows administrators use conditional permission. TOMOYO Linux supports conditional permission based on process's UID,GID etc. and/or requested pathname's UID/GID. Signed-off-by: Kentaro Takeda <[EMAIL PROTECTED]> Signed-off-by: Tetsuo Handa <[EMAIL PROTECTED]> ---

[TOMOYO 14/15] Conditional permission support.

2007-08-24 Thread Kentaro Takeda
This patch allows administrators use conditional permission. TOMOYO Linux supports conditional permission based on process's UID,GID etc. and/or requested pathname's UID/GID. Signed-off-by: Kentaro Takeda [EMAIL PROTECTED] Signed-off-by: Tetsuo Handa [EMAIL PROTECTED] ---