Re: SELinux policies, memory protections

2005-08-16 Thread Stephen Smalley
On Sat, 2005-08-13 at 23:52 -0400, John Richard Moser wrote: > I was writing a section of my paper ("Designing a Secure and Friendly > Operating System") and basically describing and explaining why the > memory protection policy ("mprotect() restrictions") supplied by PaX is > a powerful security

Re: SELinux policies, memory protections

2005-08-16 Thread Stephen Smalley
On Sat, 2005-08-13 at 23:52 -0400, John Richard Moser wrote: I was writing a section of my paper (Designing a Secure and Friendly Operating System) and basically describing and explaining why the memory protection policy (mprotect() restrictions) supplied by PaX is a powerful security tool;

SELinux policies, memory protections

2005-08-13 Thread John Richard Moser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I was writing a section of my paper ("Designing a Secure and Friendly Operating System") and basically describing and explaining why the memory protection policy ("mprotect() restrictions") supplied by PaX is a powerful security tool; and I had a

SELinux policies, memory protections

2005-08-13 Thread John Richard Moser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I was writing a section of my paper (Designing a Secure and Friendly Operating System) and basically describing and explaining why the memory protection policy (mprotect() restrictions) supplied by PaX is a powerful security tool; and I had a thought.