Re: what is the security model of linux?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

perltcl@xxxxxxxxx wrote:
Lew Pitcher wrote:
perltcl@xxxxxxxxx wrote:
hi

what is the security model of linux?

It is unclear as to what you mean by "the security model of Linux".
Do you mean "the security model imposed on userspace by the Linux
kernel"?
Or perhaps "the security model under which Linux kernel threads are
managed"?
Or even "the extended security model (and by implication, an
enumeration of the extensions) that may be used in a Linux system"?


perhaps all three, I simply mean, when they deisgn the thing called
linux OS, they must have some minimum ideas, as to, how the user is
going to use it "securely".
Or is Security an afterthought?

Nope. Security was built in from the beginning. Linux was designed as a
(simultaneous) multiuser OS, and inherited all the good security
features of Unix, along with some other security features.

Why would I know anything about how to use it securely, when I didn't
design the thing?

Don't know. You're the one asking.

All the doucments on the web, simply hints at small things, and didn't
go directly to describe what's the "minimum" secuirty that the kernel
would enforce. or do we, do I, do you, do every one just invent stuff
about security as they go along? From the lack of document on the
security model on linux, I'm guessing, they just want us to "assume" a
unix model? What is unix's security model then? everything based on
file permission? I think, if this is the case, then everything needs to
be spelled out clearly.

The problem is that there is no simple answer to your question. There
are several different types of "security model" built into Linux, and
depending on what aspect of the OS you are talking about, the security
model will be different. It takes a good big book (i.e. "Operating
Systems - Design and Implementation" or "The Design and Implementation
of the 4.3 BSD Unix" type books) to outline the "security model/s/" in
Linux. You certainly won't get a satisfactory answer in one post to
usenet.

What aspect of the OS are you concerned about?

So when something went wrong, I at least know it's wrong, not just my
fancy it's a new kernel feature.
Hmmmm.... Can't say that I have an answer for that.

- --
Lew Pitcher
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFE4m5aagVFX4UWr64RAr4YAKCC794ZS87+5qCIShWri2O+2KnQZgCfZgGA
/BrmfkbdPECkIWqQoqStVqE=
=slSx
-----END PGP SIGNATURE-----

.

Relevant Pages

  • Re: Help With School Report: Are Macs Safer Than PCs From Viruses?
    ... They successfully bypassed ALL of the OS/X security measures. ... Let me understand this, because the user allowed something to bypass the security model, the security model remains intact? ... I have already explained why viruses have a hard time replicating in the OS/X environment. ... How can you account for linux viruses without being wrong about the user base argument? ...
    (comp.sys.mac.advocacy)
  • Re: Help With School Report: Are Macs Safer Than PCs From Viruses?
    ... They successfully bypassed ALL of the OS/X security measures. ... the security model, ... I have already explained why viruses have a hard time replicating in the OS/X environment. ... How can you account for linux viruses without being wrong about the user base argument? ...
    (comp.sys.mac.advocacy)
  • Re: what is the security model of linux?
    ... Lew Pitcher wrote: ... It is unclear as to what you mean by "the security model of Linux". ... Or perhaps "the security model under which Linux kernel threads are ...
    (comp.os.linux.security)
  • Re: what is the security model of linux?
    ... Lew Pitcher wrote: ... It is unclear as to what you mean by "the security model of Linux". ... Or perhaps "the security model under which Linux kernel threads are ...
    (comp.os.linux.security)
  • Re: what is the security model of linux?
    ... File permissions. ... It is unclear as to what you mean by "the security model of Linux". ... Or perhaps "the security model under which Linux kernel threads are ...
    (comp.os.linux.security)
Quantcast