mobility and firewall

[Scott Robinson]

On Tue, Jun 07, 2005 at 04:38:17AM +0200, Ivan Krstic wrote:
[...]
> It tells a regular user nothing. It's useless. Colin Walters talked
> about this "deadly interactivity" at GUADEC in his SELinux session -- he
> had a cute screenshot of OpenBSD's systrace control mechanism to prove
> his point. The bottom line is simple. If we build a firewall solution,
> it shouldn't rely on the user knowing all three volumes of Stevens by
> heart. In fact, the user shouldn't even know the firewall is there,
> unless she's interested.
> 
[...]

So is it a non-solution because of the rich complexity, or is it a
non-solution because a user simply shouldn't know about a firewall at
all?

If it's the former, then can we design a better software firewall by
improving the current paradigm? If it's the later, are we back to
scratch and no user-able solution currently exists?

Scott.

-- 
http://quadhome.com/            - Personal webpage
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
Url : http://lists.ubuntu.com/archives/ubuntu-devel/attachments/20050606/a881cd86/attachment.pgp