search

commoncriteria / application

Protection Profile for Application Software
The Unlicense
9 stars 3 forks source link

update to Linux AA for FMT_CFG_EXT.1.3 #24

Closed jeffblank closed 10 years ago

jeffblank commented 10 years ago

This was meant to be about file permissions, not SELinux contexts: "The application must be configured by default to have file permissions which protect it from unprivileged processes."

Please add regular file permissions wording; it could be as simple as searching for world-writable files or sensitive world-readable files etc. We should chat about our expectations for SELinux policy, too (+Steve G).

kgal commented 10 years ago

Copied from Android. Removed SELinux for most other AAs too.