Re: Time to remove LSM (was Re: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks)

[Valdis.Kletnieks@vt.edu]

On Mon, 24 Apr 2006 10:24:24 +0200, Lars Marowsky-Bree said:
> That is about the dumbest argument I've heard so far, sorry. With the
> same argument, these people shouldn't be allowed to admin any computer
> system and be given a broom to wipe the floor, and let the experts take
> care of the world for them.

Anybody who's worked with a large community of actual end users will
agree that most of them *shouldn't* be allowed to admin their computer.

> Now that's a perfectly reasonable line of thought, and I've most
> certainly had it when it comes to HA and clusters myself, but in no
> means is it a good reasoning against the _technology_. If it is simpler
> to use, it will be simpler to use even for smart people, who can then
> put more care into their security profiles instead of worrying about the
> complexity.

I believe I stated quite clearly that there's certainly a place for tools that
allow smart people to do this work.  That's *totally* different from marketing
the tool as "So simple, a chimpanzee could do it.".

Attachment: pgpz4Bhxt4LSp.pgp
Description: PGP signature