MAC should be used to protect sensitive and other files about lokinet HOT 3 CLOSED

@neuroscr Mandatory Access Control is separate to (discretionary) filesystem permissions; they're very different and the implementation effort differs significantly as well.

Separate issue because there is no reason to expect these would be worked on together/at the same time, and MAC policies are a lot more involved than using setuid or similar.

from lokinet.

why a separate issue if we have #17?

from lokinet.

I think the project currently lacks expertise (I'm not an active part of the project anymore) in this area.

Happy to give guidance if there lands up being any interest in implementing this, though off-GitHub discussions have made it seem like there isn't a good understanding of the value of MAC.

TL;DR version is it gives much stronger protections and assurances around correct security-relevant behaviour; that traffic can't be routed to the clearnet, etc

Would suggest researching it a bit, as I believe it aligns with the project goals and adds value to the product.

@neuroscr

from lokinet.