About this list Date view Thread view Subject view Author view Attachment view

From: Marc E. Fiuczynski (mef_at_CS.Princeton.EDU)
Date: Fri 17 Sep 2004 - 09:25:55 BST


Sandino,

Thanks for these comments. Glad to learn more about LSM and its problems.

Best regards,
Marc

-----Original Message-----
From: vserver-bounces_at_list.linux-vserver.org
[mailto:vserver-bounces_at_list.linux-vserver.org]On Behalf Of Sandino
Araico Sánchez
Sent: Friday, September 17, 2004 3:02 AM
To: vserver_at_list.linux-vserver.org
Subject: Re: [Vserver] Re: BSDJAILS in 2.6.x as LSM?

Marc E. Fiuczynski wrote:

>Based on my reading of perf. numbers published in LSM's USENIX security
>conference, LSM does not impact performance any more significantly than
>vserver does. I.e., the numbers are so small that it doesn't really appear
>to make a big difference. Correct me if I wrong! I cannot comment on LSM
>being well tested or not.
>
>
LSM seems not to have good acceptance in other security projects:
http://www.grsecurity.net/lsm.php
http://www.rsbac.org/documentation/lsm.php

>More importantly, my hope is that by moving to LSM it is possible to stack
>other security systems on top of vserver.
>
GR Security combines conflictless with linux-vserver without any need
for LSM.

http://www.linux-vserver.org/index.php?page=grsecurityHowto

_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver

_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


About this list Date view Thread view Subject view Author view Attachment view
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Fri 17 Sep 2004 - 09:26:23 BST by hypermail 2.1.3