Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-27 Thread Stephen Smalley
On Sat, 23 Dec 2000, Kurt Garloff wrote: > I wonder how their approach compares to the RSBAC stuff, though. > The RSBAC (by Amon Ott) has all the infrastructure available to have > policy based access control; whenever an access decision has to be > taken, a call via some interface is made to a

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-27 Thread Stephen Smalley
On Sat, 23 Dec 2000, Kurt Garloff wrote: I wonder how their approach compares to the RSBAC stuff, though. The RSBAC (by Amon Ott) has all the infrastructure available to have policy based access control; whenever an access decision has to be taken, a call via some interface is made to a

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-22 Thread Andre Hedrick
On Fri, 22 Dec 2000, Alex Belits wrote: > ...so this is the result of Becker's employment at NASA and government's > legal weirdness (no, I have no idea, why of all possible choices > "Director, National Security Agency" must represent US government for > copyright purpose). Director is just

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-22 Thread Kurt Garloff
Hi, On Fri, Dec 22, 2000 at 06:39:49PM +, Alan Cox wrote: > > These folks are good at what they do and the code is GPL. > > It is worth starting to consider whether this code, or code > > from one of the other security-enhancement projects, should > > be included in the standard kernel for

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-22 Thread Alex Belits
On Fri, 22 Dec 2000, James Lewis Nance wrote: > > benefits from and which may help cut down computer crime beyond government. > > (and which of course actually is part of the NSA's real job) > > I often wonder how many people know that a whole bunch of the Linux > networking code is Copyrighted

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-22 Thread James Lewis Nance
On Fri, Dec 22, 2000 at 06:39:49PM +, Alan Cox wrote: > > I think this is a good point. Its actually a nice testimonial for free > software that its finally got the NSA contributing code in a way that everyone > benefits from and which may help cut down computer crime beyond government. >

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-22 Thread Michael H. Warfield
On Fri, Dec 22, 2000 at 06:39:49PM +, Alan Cox wrote: > > These folks are good at what they do and the code is GPL. > > It is worth starting to consider whether this code, or code > > from one of the other security-enhancement projects, should > > be included in the standard kernel for 2.6 or

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-22 Thread Alan Cox
> These folks are good at what they do and the code is GPL. > It is worth starting to consider whether this code, or code > from one of the other security-enhancement projects, should > be included in the standard kernel for 2.6 or 3.0. I think this is a good point. Its actually a nice

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-22 Thread Sandy Harris
Casey Schaufler wrote: > > "Mike A. Harris" wrote: > > > > Anyone looked into this? > > It's an implementation of Domain Enforcement, ported > from the flask project. It is a prototype. These folks are good at what they do and the code is GPL. It is worth starting to consider whether this

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-22 Thread Casey Schaufler
"Mike A. Harris" wrote: > > Anyone looked into this? It's an implementation of Domain Enforcement, ported from the flask project. It is a prototype. Persons looking for backdoors, tricks, traps, snares, or ice are going to be disappointed. It's just code like everone else produces. Much of

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-22 Thread Michael H. Warfield
On Fri, Dec 22, 2000 at 10:39:03AM +, Alex Buell wrote: > On Fri, 22 Dec 2000, Mike A. Harris wrote: > > The result is available for download at the above URL as well. Has > > anyone here toyed with it already ? > > I'd eyeball the sources for backdoors, if I were you. > Hey,

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-22 Thread Alex Buell
On Fri, 22 Dec 2000, Mike A. Harris wrote: > The result is available for download at the above URL as well. Has > anyone here toyed with it already ? I'd eyeball the sources for backdoors, if I were you. Cheers, Alex -- Here, have some homemade chocolate biscuits.

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-22 Thread Alex Buell
On Fri, 22 Dec 2000, Mike A. Harris wrote: The result is available for download at the above URL as well. Has anyone here toyed with it already ? paranaoia I'd eyeball the sources for backdoors, if I were you. /paranaoia Cheers, Alex -- Here, have some homemade chocolate biscuits.

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-22 Thread Michael H. Warfield
On Fri, Dec 22, 2000 at 10:39:03AM +, Alex Buell wrote: On Fri, 22 Dec 2000, Mike A. Harris wrote: The result is available for download at the above URL as well. Has anyone here toyed with it already ? paranaoia I'd eyeball the sources for backdoors, if I were you. /paranaoia

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-22 Thread Casey Schaufler
"Mike A. Harris" wrote: Anyone looked into this? It's an implementation of Domain Enforcement, ported from the flask project. It is a prototype. Persons looking for backdoors, tricks, traps, snares, or ice are going to be disappointed. It's just code like everone else produces. Much of the

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-22 Thread Sandy Harris
Casey Schaufler wrote: "Mike A. Harris" wrote: Anyone looked into this? It's an implementation of Domain Enforcement, ported from the flask project. It is a prototype. These folks are good at what they do and the code is GPL. It is worth starting to consider whether this code, or code

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-22 Thread Alan Cox
These folks are good at what they do and the code is GPL. It is worth starting to consider whether this code, or code from one of the other security-enhancement projects, should be included in the standard kernel for 2.6 or 3.0. I think this is a good point. Its actually a nice testimonial

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-22 Thread Michael H. Warfield
On Fri, Dec 22, 2000 at 06:39:49PM +, Alan Cox wrote: These folks are good at what they do and the code is GPL. It is worth starting to consider whether this code, or code from one of the other security-enhancement projects, should be included in the standard kernel for 2.6 or 3.0.

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-22 Thread James Lewis Nance
On Fri, Dec 22, 2000 at 06:39:49PM +, Alan Cox wrote: I think this is a good point. Its actually a nice testimonial for free software that its finally got the NSA contributing code in a way that everyone benefits from and which may help cut down computer crime beyond government. (and

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-22 Thread Alex Belits
On Fri, 22 Dec 2000, James Lewis Nance wrote: benefits from and which may help cut down computer crime beyond government. (and which of course actually is part of the NSA's real job) I often wonder how many people know that a whole bunch of the Linux networking code is Copyrighted by the

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-22 Thread Kurt Garloff
Hi, On Fri, Dec 22, 2000 at 06:39:49PM +, Alan Cox wrote: These folks are good at what they do and the code is GPL. It is worth starting to consider whether this code, or code from one of the other security-enhancement projects, should be included in the standard kernel for 2.6 or

Re: The NSA's Security-Enhanced Linux (fwd)

2000-12-22 Thread Andre Hedrick
On Fri, 22 Dec 2000, Alex Belits wrote: ...so this is the result of Becker's employment at NASA and government's legal weirdness (no, I have no idea, why of all possible choices "Director, National Security Agency" must represent US government for copyright purpose). Director is just

The NSA's Security-Enhanced Linux (fwd)

2000-12-21 Thread Mike A. Harris
Anyone looked into this? -- Mike A. Harris - Linux advocate - Open source advocate This message is copyright 2000, all rights reserved. Views expressed are my own, not necessarily shared by my employer.