From: Marc E. Fiuczynski (mef_at_CS.Princeton.EDU)
Date: Fri 17 Sep 2004 - 09:25:55 BST
Sandino,
Thanks for these comments. Glad to learn more about LSM and its problems.
Best regards,
Marc
-----Original Message-----
From: vserver-bounces_at_list.linux-vserver.org
[mailto:vserver-bounces_at_list.linux-vserver.org]On Behalf Of Sandino
Araico Sánchez
Sent: Friday, September 17, 2004 3:02 AM
To: vserver_at_list.linux-vserver.org
Subject: Re: [Vserver] Re: BSDJAILS in 2.6.x as LSM?
Marc E. Fiuczynski wrote:
>Based on my reading of perf. numbers published in LSM's USENIX security
>conference, LSM does not impact performance any more significantly than
>vserver does. I.e., the numbers are so small that it doesn't really appear
>to make a big difference. Correct me if I wrong! I cannot comment on LSM
>being well tested or not.
>
>
LSM seems not to have good acceptance in other security projects:
http://www.grsecurity.net/lsm.php
http://www.rsbac.org/documentation/lsm.php
>More importantly, my hope is that by moving to LSM it is possible to stack
>other security systems on top of vserver.
>
GR Security combines conflictless with linux-vserver without any need
for LSM.
http://www.linux-vserver.org/index.php?page=grsecurityHowto
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver