From: James Morris <jmorris@intercode.com.au>
To: Pekka Savola <pekkas@netcore.fi>
Cc: netdev@oss.sgi.com
Subject: Re: disablenetwork() syscall?
Date: Tue, 8 Jul 2003 09:59:32 +1000 (EST) [thread overview]
Message-ID: <Mutt.LNX.4.44.0307080954170.5824-100000@excalibur.intercode.com.au> (raw)
In-Reply-To: <Pine.LNX.4.44.0307072237560.11843-100000@netcore.fi>
On Mon, 7 Jul 2003, Pekka Savola wrote:
> Hi,
>
> In a bugtraq thread, DJ Bernstein brought up an idea which I'm not sure
> has been brought up in the past.
Such a feature already exists in SELinux.
> I'm not sure whether it's feasible or
> not, but at least it (and other methods to limit the functions of a
> user-level code) might bear consideration.
This is precisely what LSM is for, so new security models can be
implemented without any direct effect on the core kernel.
- James
--
James Morris
<jmorris@intercode.com.au>
next prev parent reply other threads:[~2003-07-07 23:59 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-07-07 19:40 disablenetwork() syscall? Pekka Savola
2003-07-07 19:46 ` Jeff Garzik
2003-07-07 19:52 ` Pekka Savola
2003-07-07 22:33 ` Arnaldo Carvalho de Melo
2003-07-07 21:03 ` Mitchell Blank Jr
2003-07-07 23:59 ` James Morris [this message]
2003-07-13 7:04 ` Pekka Savola
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=Mutt.LNX.4.44.0307080954170.5824-100000@excalibur.intercode.com.au \
--to=jmorris@intercode.com.au \
--cc=netdev@oss.sgi.com \
--cc=pekkas@netcore.fi \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.