[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: RFC: jail functionality

To: Stephen Smalley <sds@xxxxxxxxxxxxx>
Subject: Re: RFC: jail functionality
From: James Morris <jmorris@xxxxxxxxxx>
Date: Wed, 29 Jun 2005 14:03:10 -0400 (EDT)
Cc: serue@xxxxxxxxxx, <linux-security-module@xxxxxxxxx>, SELinux <selinux@xxxxxxxxxxxxx>
In-reply-to: <1120062900.3553.151.camel@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
Sender: owner-selinux@xxxxxxxxxxxxx

On Wed, 29 Jun 2005, Stephen Smalley wrote:

> > The attached task-lookup patches?
> 
> Not sure it provides much value.

If yoy need this, why not look at proper isolation via Xen?

LSM is about access control, not virtualization.

- James
-- 
James Morris
<jmorris@xxxxxxxxxx>

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.

Follow-Ups:
- Re: RFC: jail functionality
  - From: serue

References:
- Re: RFC: jail functionality
  - From: Stephen Smalley

Prev by Date: Re: wish-list item for selinux policy analyss
Next by Date: RE: file contexts and modularity
Previous by thread: Re: RFC: jail functionality
Next by thread: Re: RFC: jail functionality
Index(es):
- Date
- Thread

This mailing list archive is a service of Copilot Consulting.