From: Eric Paris <eparis@redhat.com>
To: James Morris <jmorris@namei.org>
Cc: Andrew Morton <akpm@linux-foundation.org>,
Stephen Smalley <sds@tycho.nsa.gov>,
linux-kernel <linux-kernel@vger.kernel.org>
Subject: Re: [PATCH 1/2] selinux: don't enable minimum mmap checking by default
Date: Thu, 28 Jun 2007 11:45:38 -0400 [thread overview]
Message-ID: <1183045538.3905.15.camel@localhost.localdomain> (raw)
In-Reply-To: <Line.LNX.4.64.0706281139010.13114@localhost.localdomain>
On Thu, 2007-06-28 at 11:40 -0400, James Morris wrote:
> Don't enable minimum mmap checking by default in SELinux, as it may break
> existing applications which do not have updated policy.
>
> We will be able to enable it by default later, once we have code to handle
> new permissions which are not present in the user's policy.
>
> Signed-off-by: James Morris <jmorris@namei.org>
Acked-by: Eric Paris <eparis@redhat.com>
prev parent reply other threads:[~2007-06-28 15:45 UTC|newest]
Thread overview: 15+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-06-22 20:38 [PATCH 1/7] ICH Force HPET: Make generic time capable of switching broadcast timer Venki Pallipadi
2007-06-23 16:52 ` Andrew Morton
2007-06-23 23:17 ` Thomas Gleixner
2007-06-28 7:12 ` Andrew Morton
2007-06-28 8:27 ` Andrew Morton
2007-06-28 12:12 ` James Morris
2007-06-28 17:56 ` Andrew Morton
2007-06-28 12:45 ` Eric Paris
2007-06-28 18:02 ` Andrew Morton
2007-06-28 18:55 ` James Morris
2007-06-28 15:40 ` [PATCH 1/2] selinux: don't enable minimum mmap checking by default James Morris
2007-06-28 15:41 ` [PATCH 2/2] security: move mmap_min_addr sysctl to /proc/sys/vm James Morris
2007-06-28 19:05 ` Alexey Dobriyan
2007-06-28 19:12 ` James Morris
2007-06-28 15:45 ` Eric Paris [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1183045538.3905.15.camel@localhost.localdomain \
--to=eparis@redhat.com \
--cc=akpm@linux-foundation.org \
--cc=jmorris@namei.org \
--cc=linux-kernel@vger.kernel.org \
--cc=sds@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®