Pkg xen devel - Jun 2008 - Security module (Flask) support should be disabled

I notice that the Flask / ACM security module support has been enabled
in the latest Debian Xen packages.  I'm afraid I think this is a
mistake.

In our opinion this code is of very poor quality.  It is certainly
ill-tested and not widely used.

We (Xensource/Citrix) have received more than one serious
vulnerability report, of problems which make an installation with the
Flask support compiled in much less secure than one without (as
opposed to simply failures to provide the additional security
properties intended).

We have passed these reports upstream to the contributors of the Flask
system but even after a substantial time we have not had a
satisfactory resolution.  Sadly these reports are still embargoed so I
can't go into more detail.

I can say that we're considering deprecating or even completely
removing this facility in a future release.  Certainly I would
recommend against deploying a Xen with Flask compiled in.

Ian.

On Mon, Jun 09, 2008 at 05:25:33PM +0100, Ian Jackson
wrote:
> I notice that the Flask / ACM security module support has been enabled
> in the latest Debian Xen packages.  I'm afraid I think this is a
> mistake.
Where? I don't see anything which enables the support. Also a quick grep
over the hypervisors shows nothing substantial.

Bastian

-- 
No problem is insoluble.
		-- Dr. Janet Wallace, "The Deadly Years", stardate 3479.4