A few questions
Stephen Smalley
sds at tycho.nsa.gov
Thu Sep 21 15:37:51 UTC 2006
On Thu, 2006-09-21 at 10:26 -0500, Klaus Weidner wrote:
> The "accurate" part is a dig at AppArmor which is path based, as opposed
> to the file labels which are directly associated with objects. Each has
> advantages and disadvantages, check the LKML "LSM" flamewar for
> additional background information.
For security, pathname-based mechanism has only disadvantages.
--
Stephen Smalley
National Security Agency
More information about the fedora-selinux-list
mailing list