Re: Policy question

Previous message: Titus D. Winters: "Policy question"
In reply to: Titus D. Winters: "Policy question"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

gregat_private

On Wed, May 30, 2001 at 11:20:03AM -0700, Titus D. Winters wrote:
> So Chris Lundberg and I are in the process of porting over a honeypot that
> I wrote as an LKM a while back.  Since we are hiding files and processes,
> we are finding that returning EPERM in places (like ptrace, open, and
> several others) is less useful than returning something like ESRCH or
> ENOENT.  Aside from the 1 assignment per query performance hit, why are we
> not doing something like
> 
> if ((ret = security_ops->ptrace(current->p_pptr, current)))
> 	goto out;
> 
> instead of
> 
> if (security_ops->ptrace(current->p_pptr, current))
> 	goto out;

That looks like the proper fix.  A patch against bitkeeper would be
greatly appreciated.

thanks,

greg k-h

_______________________________________________
linux-security-module mailing list
linux-security-moduleat_private
http://mail.wirex.com/mailman/listinfo/linux-security-module