From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <linux-kernel-owner+w=401wt.eu-S1766985AbXDSVIh@vger.kernel.org>
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
	id S1766985AbXDSVIh (ORCPT <rfc822;w@1wt.eu>);
	Thu, 19 Apr 2007 17:08:37 -0400
Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1766994AbXDSVIg
	(ORCPT <rfc822;linux-kernel-outgoing>);
	Thu, 19 Apr 2007 17:08:36 -0400
Received: from mail7.sea5.speakeasy.net ([69.17.117.9]:59737 "EHLO
	mail7.sea5.speakeasy.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org
	with ESMTP id S1766985AbXDSVIg (ORCPT
	<rfc822;linux-kernel@vger.kernel.org>);
	Thu, 19 Apr 2007 17:08:36 -0400
Date: Thu, 19 Apr 2007 17:08:34 -0400 (EDT)
From: James Morris <jmorris@namei.org>
X-X-Sender: jmorris@d.namei
To: Stephen Smalley <sds@tycho.nsa.gov>
cc: David Wagner <daw-usenet@taverner.cs.berkeley.edu>,
       linux-kernel@vger.kernel.org
Subject: Re: AppArmor FAQ
In-Reply-To: <1177016615.27654.293.camel@moss-spartans.epoch.ncsc.mil>
Message-ID: <Line.LNX.4.64.0704191708240.7896@d.namei>
References: <20070417181016.GA10903@one.firstfloor.org> 
 <Line.LNX.4.64.0704180935100.25495@d.namei> <4626746A.9010701@novell.com> 
 <1177002858.27654.119.camel@moss-spartans.epoch.ncsc.mil> 
 <f08i81$a11$1@taverner.cs.berkeley.edu> <1177016615.27654.293.camel@moss-spartans.epoch.ncsc.mil>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: linux-kernel-owner@vger.kernel.org
X-Mailing-List: linux-kernel@vger.kernel.org

On Thu, 19 Apr 2007, Stephen Smalley wrote:

> Lastly, if you want to judge AA as a jail mechanism, I think you'll find
> it fails there too.  So where does that leave it?  An easy-to-use yet
> inadequate solution for MAC or jail.

It's not easy to use.


-- 
James Morris
<jmorris@namei.org>