Re: Re: DJB's students release 44 poorly-worded, overblown advisories

[Crispin Cowan <crispin () immunix com>]

ljknews wrote:


On most important systems there is no need for the users to be able
to provide executable which they then run.  Executables are provided
by the system manager.
 

While I am sympathetic to this point of view, it is no longer relevant 
to the modern context, where many data formats end up being executable, 
e.g. Office documents with executable macros in them.


Securing a MAC system in which the users are hog-tied is easy. The trick 
is to provide reasonable security *and* reasonable usability.


Crispin

--
Crispin Cowan, Ph.D.  http://immunix.com/~crispin/
CTO, Immunix          http://immunix.com