4 ms·

SELinux has xorg hooks [1] to isolate the gui, actually... yes that means with SELinux you can control which window can talk to which, what clipboard can be use

by zobzu 13y ago

SELinux has xorg hooks [1] to isolate the gui, actually... yes that means with SELinux you can control which window can talk to which, what clipboard can be used where, by what window, etc. not that it makes the xorg code better in any way, but, when you're going to say the world is ignorant and you know it all, at least get your stuff right. Thats why people "hate" you as you describe in this post. Having an aggressive style doesn't make you more accurate. It just makes you annoying. [1] http://www.nsa.gov/research/_files/selinux/papers/xorg07-paper.pdf http://www.nsa.gov/research/_files/selinux/papers/xorg07-pap...

roghummal 13y ago
This is the kind of hyberbole you get when someone is trying hard to maintain a high profile when their 15 minutes is over. It doesn't matter if you're right, wrong, or even interesting as long as you get the page views. Blech.
long 13y ago
She is aware of this but has a bone to pick with the particular way that SE Linux secures the GUI: http://theinvisiblethings.blogspot.com/2011/04/linux-security-circus-on-gui-isolation.html?showComment=1303575708573#c8629263254767793603 http://theinvisiblethings.blogspot.com/2011/04/linux-securit... I agree, though, that the style is overly aggressive.
- ris 13y ago
  I particularly disagree with her assertion that Xen is a more trustworthy place for security over the "big, bloated linux kernel". I would argue that the (perhaps smaller) Xen code has seen far less security scrutiny than the kernel and has a far less pronounced culture of security.
  - zurn 13y ago
    Linux doesn't have a good culture of security. Local root bugs are dime a dozen. Security fixes in the kernel are not flagged as such. There's no systematic effort to stop the most common types of security bug (memory bugs in some driver ioctl handler). Linus doesn't have much patience for or interest in security improvements - look at http://article.gmane.org/gmane.linux.kernel/706950 http://article.gmane.org/gmane.linux.kernel/706950 - Etc etc.
    - ris 13y ago
      Before submitting, I debated whether to put a disclaimer line in - "not that the kernel has the worlds best security record", but I thought - nah nobody's going to use this as an opportunity to jump in & grind their "kernel security" axe. What a fool am I. I however think the relative silence around Xen security is far more of a worry. That was my point.
deleted 13y ago
[deleted]

by zobzu 13y ago

roghummal 13y ago

This is the kind of hyberbole you get when someone is trying hard to maintain a high profile when their 15 minutes is over. It doesn't matter if you're right, wrong, or even interesting as long as you get the page views. Blech.

long 13y ago

She is aware of this but has a bone to pick with the particular way that SE Linux secures the GUI: http://theinvisiblethings.blogspot.com/2011/04/linux-security-circus-on-gui-isolation.html?showComment=1303575708573#c8629263254767793603 http://theinvisiblethings.blogspot.com/2011/04/linux-securit... I agree, though, that the style is overly aggressive.

ris 13y ago
I particularly disagree with her assertion that Xen is a more trustworthy place for security over the "big, bloated linux kernel". I would argue that the (perhaps smaller) Xen code has seen far less security scrutiny than the kernel and has a far less pronounced culture of security.
- zurn 13y ago
  Linux doesn't have a good culture of security. Local root bugs are dime a dozen. Security fixes in the kernel are not flagged as such. There's no systematic effort to stop the most common types of security bug (memory bugs in some driver ioctl handler). Linus doesn't have much patience for or interest in security improvements - look at http://article.gmane.org/gmane.linux.kernel/706950 http://article.gmane.org/gmane.linux.kernel/706950 - Etc etc.
  - ris 13y ago
    Before submitting, I debated whether to put a disclaimer line in - "not that the kernel has the worlds best security record", but I thought - nah nobody's going to use this as an opportunity to jump in & grind their "kernel security" axe. What a fool am I. I however think the relative silence around Xen security is far more of a worry. That was my point.

deleted 13y ago

[deleted]