Jamie Nguyen
dysco****@gmail*****
Sat Nov 27 09:17:17 JST 2010
Hi, Toshiharu Harada wrote: > TOMOYO version 1.0 was released November 11th, 2005. > Learning mode has been there as a TOMOYO's main feature since then. > It was the best way to demonstrate what TOMOYO for > demonstrations and presentations. > > It is true that you can live without a learning mode, but > don't worry its deletion is not scheduled nor decided. > Tetsuo requested me to open this mailing list to gather > various opinions from TOMOYO users. We want to make TOMOYO > better and useful, your opinion is precious and no important > specification changes should be made without discussing here. As you know, the key difference between Learning and Permissive is that Learning Mode appends undefined requests to domain policy automatically, whereas Permissive Mode does not. If Learning Mode is removed, then the replacement workflow involves setting domains to Permissive Mode and viewing the logs to manually append acceptable requests to policy. This is a considerably more difficult and time-consuming process than the use of Learning Mode. I presume the reason to consider removal of Learning Mode is to reduce complexity. But I feel this actually increases the difficulty much more than it decreases the complexity. Kind regards
TOMOYO
Fork