OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Integrating securelevel and kauth(9)

From: Martin Husemann (martinduskware.de)
Date: Mon Mar 27 2006 - 05:20:35 CST


On Mon, Mar 27, 2006 at 07:57:51PM +0900, YAMAMOTO Takashi wrote:
> - if you want fine-grained control ("multiple knobs"),
> it should be another listener(s).

This sounds like a good aproach to me.

And yes, I do think that we want finer grained controll - at least remove
the obvious abuses of securelevel, as Thor pointed out, e.g. the packet filter
rule loading restrictions.

Martin