The tomoyo tag has no wiki summary.
7
votes
3answers
276 views
Security tradeoffs of pathname-based MAC (e.g., TOMOYO, grsecurity, AppArmor, …)
I have been learning about MAC (Mandatory Access Control) systems in Linux. Often, but not always, these are tied to Linux Security Modules. Some systems I've looked at: SELinux, Tomoyo, AppArmor, ...
1
vote
1answer
61 views
How to forbid one directory only in TOMOYO (2.5)?
(For example) I want to restrict write access to /home/backup from anybody, except a particular backup script. (To protect from accidental deletion.) For this, I suppose, it is enough to have two ...
