Comments on: Random Opinions, Expert Opinions, and Facts about AppArmor

By: David Lang

David Lang — Fri, 14 Nov 2008 00:31:08 +0000

It doesn’t surprise me that AA development has stalled, with the violent opposition to it’s inclusion in the kernel maintaining it seperatly is very questionable.

however, if the nessasary pathname based hooks can get included (which one other project is working on, something like TOYMO) I would expect AA development to jump significantly

By: etbe

etbe — Sat, 06 Sep 2008 02:51:03 +0000

James: Please provide the URL for your dissertation, I would like to read it.

If you want to find out what I have done then ask Google.

It seems very strange to me that an anonymous commentator on my blog expects their comments (and comments of other anonymous people) to be given the same weight as comments and posts by people such as the PaX developers and Crispin.

Note that on the net anyone can claim to have a university degree. Merely claiming to have years of relevant experience is easy and proves nothing.

As for whether you have to prove anything to me, 9 blog comments is rather a lot, so you seem to be trying hard.

By: James

James — Fri, 05 Sep 2008 22:46:12 +0000

I don’t use AppArmor, and don’t have any reason to hope it is not dead, the evidence simply does not support that, only the selective evidence you tried to show inferred it.

I have spent almost the 10 years working with this systems, and did a dissertation on the differences between them at monash. I really don’t feel I have to proove anything to you, if you can not hold an argument, or support your claims with non biased evidence.

What have you done that makes you such an authority, apart from having an selinux play machine?

By: etbe

etbe — Fri, 05 Sep 2008 22:26:52 +0000

James: Claiming that an MS employee who is working on a project that is actively competing with AppArmor is still the “head developer” of AppArmor while also claiming that AppArmor is a live project is not a well formed argument. It’s a desperate attempt to try and find evidence that supports what you want to believe.

If you want to talk about credibility, how about providing some information on the relevant work you have done. As I noted in the first paragraph of this post, unsubstantiated opinions of people who have no relevant experience don’t mean much to me.

By: James

James — Fri, 05 Sep 2008 22:15:09 +0000

Russel,

Please try to refrain from being condescending if you can not respond to a well formed argument.

I did not say Ubuntu have picked up development, but may do so. However:

http://changelogs.ubuntu.com/changelogs/pool/main/a/apparmor/apparmor_2.3+1289-0ubuntu2/changelog

You have already lost quite a bit of credibility by apparently judging a security framework based on the packages available for it.

By: etbe

etbe — Fri, 05 Sep 2008 20:41:48 +0000

http://en.wikipedia.org/wiki/Cognative_dissonance

James: Please read the above URL.

If Ubuntu have picked up development then please tell me where to find it. I checked all the usual locations (google search, wikipedia, and freshmeat) and they all pointed to the Novell pages.

As for RSBAC, please package it for your favourite distribution and tell us where the packages are.