<![CDATA[Dev1 Galaxy Forum / Tomoyo LSM and on by default]]> https://dev1galaxy.org/viewtopic.php?id=6086 Mon, 16 Oct 2023 18:04:59 +0000 FluxBB <![CDATA[Tomoyo LSM and on by default]]> https://dev1galaxy.org/viewtopic.php?pid=44909#p44909 Hello,
I only noticed tomoyo because by default this LSM is configured in kernel on. But in default it's not installed so it's throwing errors.

the MAC module seems.. useful if one was to deploy it.
I see we have other ways to initiate MAC without Tomoyo. But Tomoyo works as a good audit / logging system without MAC it would log with very little interrupts on normal operation. I like tomoyo's tree system. Right now most if not all my logging is only from kprint.

Just curious was there a choice to enable tomoyo but not include the tomoyo-tools by default?
As for MAC has anyone deployed any software with it? By default it is enabled so I would like to get some use out of it.

]]> Mon, 16 Oct 2023 18:04:59 +0000 https://dev1galaxy.org/viewtopic.php?pid=44909#p44909