lkml.org 
[lkml]   [2019]   [Mar]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Date
SubjectRe: what happened to SECURITY_DAC?
On Wed, Mar 20, 2019 at 5:39 PM Randy Dunlap <rdunlap@infradead.org> wrote:
>
> wow. Commit 70b62c25665f636c9f6c700b26af7df296b0887e
> from last Sept. 14, 2018, total commit description says:
>
> LoadPin: Initialize as ordered LSM
>
> This converts LoadPin from being a direct "minor" LSM into an ordered LSM.
>
> Nowhere does it say anything like "this also deletes any notions of
> DEFAULT_SECURITY and DAC."

This was a mistaken merge of chunks from a larger series that Casey
and I were working on. It should have been split out.

> Was this deletion a (sekrit) security issue that was not being highlighted on purpose?

No, just an error while refactoring to in creating CONFIG_LSM.

> and what do you recommend for simple DAC-like security?

See CONFIG_LSM. There are some related issues getting discussed here, too:
https://lore.kernel.org/linux-security-module/f23d0fad-dc72-0e53-cac6-31abfd12a050@I-love.SAKURA.ne.jp/


--
Kees Cook

\
 
 \ /
  Last update: 2019-03-21 17:36    [W:0.044 / U:2.364 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site