Re: Desktop apps interoperability

[Tom <tom@xxxxxxxxxxx>]

On Thu, Mar 31, 2005 at 11:08:07AM -0500, Stephen Smalley wrote:
> > Look here, sonny, I've been doing MLS systems
> > since 1986 and the One Truth You Must Learn
> > is that applications can not be changed. No.
> > Don't even consider thinking in this direction.
> > This is wrong. Sometimes all that's available
> > is the binary. Sometimes they like the way it
> > works.
> 
> Ah, yes.  That's certainly the example we should be following...the
> example set by past trusted/MLS OSes.  No thanks, we're trying to solve
> real problems here...

He does have a point, though - sometimes the application can not be
changed. It may be a legacy application and for all I care, those are
the ones most in need of a protective cage.



-- 
http://web.lemuria.org/pubkey.html
pub  1024D/2D7A04F5 2002-05-16 Tom Vogt <tom@xxxxxxxxxxx>
     Key fingerprint = C731 64D1 4BCF 4C20 48A4  29B2 BF01 9FA1 2D7A 04F5

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.