I used to believe in a single, integrated security module that
addressed all the issues. Now that Linux is supporting everything
from real time tire pressure gauges in tricycles to the global
no-fly list that just doesn't seem reasonable. We need better turn
around on supplemental mechanisms. That means collections of
smaller, simpler LSMs instead of monoliths that only a few select
individuals or organizations have any hope of configuring properly.
— Casey Schaufler
Well at least it crashes safely.
— Frederic Weisbecker
to post comments)