Re: Desktop apps interoperability

On Fri, Apr 01, 2005 at 01:28:29PM +0800, Rogelio Serrano wrote:
> > > He does have a point, though - sometimes the application can not be
> > > changed. It may be a legacy application and for all I care, those are
> > > the ones most in need of a protective cage.
>
> Unchangeable legacy apps should die.

Just like hunger and war, yes. The fact remains that they exist, and you and I have to work with (and/or around) them.

Now, you _can_ do binary patching or even runtime binary patching, you can overload system calls, you can do all sorts of dirty tricks to change the behaviour of an "unchangeable" app. In most cases that's non-trivial and it'll certainly mean you lose customer support.

SELinux is an excellent way to deal with these abominations and beat a little sense into them. Were you on the list 2 years ago or so, when I wrote policies for commercial Linux games? The audit log is an interesting read, you wouldn't _believe_ what they try to access for no obvious reason.

-- 
PGP/GPG key: http://web.lemuria.org/pubkey.html
pub  1024D/2D7A04F5 2002-05-16 Tom Vogt <tom@lemuria.org>
     Key fingerprint = C731 64D1 4BCF 4C20 48A4  29B2 BF01 9FA1 2D7A 04F5

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.