Even the smallest ... [LWN.net]

Even the smallest ...

Posted Aug 27, 2009 21:19 UTC (Thu) by AnswerGuy (guest, #1256)
In reply to: Walsh: Secure Virtualization Using SELinux (sVirt) by mmcgrath
Parent article: Walsh: Secure Virtualization Using SELinux (sVirt)

... microkernel will have some vulnerabily.

And yet you assert that SELinux which it's "not that much bloat" will mitigate such risks (without introducing additional vulnerabilities).

On that last (implicit) point you are demonstrably wrong. There have been vulnerabilities introduced by the presence of SELinux.

What is more disturbing, however, is the overall blind assertion. "even the smallest" (any) X will Y but *my* Z will NOT Y" --- that you can make such an assertion without knowing anything about the hypothetical X suggests that you're advocacy of SELinux (Z) is in fact a matter of faith rather than objective analysis. For an issue such as this (a matter of science and pragmatic application -- engineering) this completely undermines your credibility.

to post comments

Even the smallest ...

Posted Aug 27, 2009 22:03 UTC (Thu) by mmcgrath (guest, #44906) [Link]

> On that last (implicit) point you are demonstrably wrong. There have been vulnerabilities introduced by the presence of SELinux.

Since security is the overall goal here, has SELinux introduced more vulnerabilities then it's prevented? I think not.

> this completely undermines your credibility.

No need to undermine me :) Stick with what arguing what I said. Unless you have something to gain by my turning out to be stupid or otherwise incompetent.

/me breaks out the link so grown ups on the Internet can be grown up again - http://en.wikipedia.org/wiki/Ad_hominem