Re: Other LSM modules (i.e. ACLs)

From: aleph1at_private
Date: Mon Apr 16 2001 - 15:35:55 PDT

  • Next message: Crispin Cowan: "Re: Other LSM modules (i.e. ACLs)"

    * Crispin Cowan (crispinat_private) [010416 22:18]:
    > There are (now, thanks Aleph) three known storage repositories for persistent meta data:
    > 
    >    * put it in a conf file:  used by SubDomain and LIDS, among others
    >    * extended attributes in the file system:  required by full POSIX.1e capabilities, but
    >      not supported by common Linux file systems, and thus Linux capabilities are not fully
    >      POSIX.1e compliant
    >    * aleph's network repository method
    
    The are as many as you can imagine:
    
    * Save in the CMOS non-volatile memory.
    * Communicate via a serial port to a server.
    * Save in a smart card.
    * Save in a compact flash card.
    * As parameters to LILO.
    etc
    
    Some of them provide more capacity than others but no size fits all.
    
    -- 
    Elias Levy
    SecurityFocus.com
    http://www.securityfocus.com/
    Si vis pacem, para bellum
    
    _______________________________________________
    linux-security-module mailing list
    linux-security-moduleat_private
    http://mail.wirex.com/mailman/listinfo/linux-security-module
    



    This archive was generated by hypermail 2b30 : Mon Apr 16 2001 - 15:36:42 PDT