Hello,

since kernel 2.6.25 SMACK is inside the official kernel as alternative to
the large SELinux framework. But until now there are no userspace tools
packaged in Debian to administrate SMACK. And also there are no additional
patches made for system tools (coreutils, ssh, busybox ...).

How is the opinion about support for this alternative security framework?

Were this theme discussed in the past for Debian?

Does some Debian developer want to add userspace support into Debian?

Does anybody know reason against support of SMACK?


By the way:
The main (upstream) developer Casey Schaufler <casey@schaufler-ca.com>
has switched his work to MeeGo (http://www.meego.com) where some packages
for SMACK are in current development.

---
Have a nice day.

Joachim (Germany)


--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 20110330131427.11d1c0d5@jupiter.home">http://lists.debian.org/20110330131427.11d1c0d5@jupiter.home

On Wed, 30 Mar 2011, Joachim Wiedorn <ad_debian@joonet.de> wrote:
> How is the opinion about support for this alternative security framework?

I think it would be good to have it.

> Were this theme discussed in the past for Debian?

Not AFAIK.

> Does some Debian developer want to add userspace support into Debian?

Why don't you do it?

> Does anybody know reason against support of SMACK?

No-one has been interested in doing the coding.

--
My Main Blog http://etbe.coker.com.au/
My Documents Blog http://doc.coker.com.au/


--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 201103302245.53366.russell@coker.com.au">http://lists.debian.org/201103302245.53366.russell@coker.com.au

Russell Coker <russell@coker.com.au> wrote on 2011-03-30 22:45:

> On Wed, 30 Mar 2011, Joachim Wiedorn <ad_debian@joonet.de> wrote:
> > How is the opinion about support for this alternative security framework?
>
> I think it would be good to have it.

O.k.

> > Does some Debian developer want to add userspace support into Debian?
>
> Why don't you do it?

That's an idea. But my know-how is not very great in security frameworks.
Especially someone who know SELinux would be a good reference.

> No-one has been interested in doing the coding.

I think the support is very poor in Debian until now. Therefore nobody will
install and test this new framework and stay with SELinux - right?

---
Have a nice day.

Joachim (Germany)


--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 20110331203139.6f2332e8@jupiter.home">http://lists.debian.org/20110331203139.6f2332e8@jupiter.home

On Fri, 1 Apr 2011, Joachim Wiedorn <ad_debian@joonet.de> wrote:
> > > Does some Debian developer want to add userspace support into Debian?
> >
> > Why don't you do it?
>
> That's an idea. But my know-how is not very great in security frameworks.
> Especially someone who know SELinux would be a good reference.

If you need some tips then I will be happy to offer some. I can also host
some developer resources if you need it (we can discuss that off-list).

But you really have to just do it. I didn't know much about "security
frameworks" before I started working on SE Linux.

> > No-one has been interested in doing the coding.
>
> I think the support is very poor in Debian until now. Therefore nobody will
> install and test this new framework and stay with SELinux - right?

As SE Linux has significantly less than 50% user-share in Debian that leaves
plenty of scope for you to find some SMACK users. :-#

--
My Main Blog http://etbe.coker.com.au/
My Documents Blog http://doc.coker.com.au/


--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 201104011019.38603.russell@coker.com.au">http://lists.debian.org/201104011019.38603.russell@coker.com.au

Joachim Wiedorn wrote:
> Russell Coker <russell@coker.com.au> wrote on 2011-03-30 22:45:
>
>> On Wed, 30 Mar 2011, Joachim Wiedorn <ad_debian@joonet.de> wrote:
>> > How is the opinion about support for this alternative security
>> framework?
>>
>> I think it would be good to have it.
>
> O.k.

I never tried it, but I also think it would be good to have it.

> I think the support is very poor in Debian until now. Therefore nobody
> will
> install and test this new framework and stay with SELinux - right?

I would help you with installing and testing and ....

Chris

--
Christian Pohl
whp@pohlcity.de


--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 1cab44431ece7b34d283fea1584700f0.squirrel@aringill ">http://lists.debian.org/1cab44431ece7b34d283fea1584700f0.squirrel@aringill

Hello Russell and Christian,

Russell Coker <russell@coker.com.au> wrote on 2011-04-01 10:19:
>
> If you need some tips then I will be happy to offer some. I can also host
> some developer resources if you need it (we can discuss that off-list).

Thank you for your offer for tips and resources.

> But you really have to just do it. I didn't know much about "security
> frameworks" before I started working on SE Linux.

So it seems I have chances to learn it, too.

> As SE Linux has significantly less than 50% user-share in Debian that leaves
> plenty of scope for you to find some SMACK users. :-#

That is my thought, too.


"Christian Pohl" <whp@pohlcity.de> wrote on 2011-04-01 08:27:
>
> I would help you with installing and testing and ....

Thank you for your offer.


Then I want to start with maintainance of smack utilities.
Thank you very much for your feedback!

---
Have a nice day.

Joachim (Germany)


--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 20110401103017.4f010863@jupiter.home">http://lists.debian.org/20110401103017.4f010863@jupiter.home

Hello I want to try it for lxc containers...


--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 1308232083.7619.1.camel@U99">http://lists.debian.org/1308232083.7619.1.camel@U99