A few questions

Stephen Smalley sds at tycho.nsa.gov
Thu Sep 21 15:37:51 UTC 2006


On Thu, 2006-09-21 at 10:26 -0500, Klaus Weidner wrote:
> The "accurate" part is a dig at AppArmor which is path based, as opposed
> to the file labels which are directly associated with objects. Each has
> advantages and disadvantages, check the LKML "LSM" flamewar for
> additional background information.

For security, pathname-based mechanism has only disadvantages.

-- 
Stephen Smalley
National Security Agency




More information about the fedora-selinux-list mailing list