Re: sys_setpriority error

From: Stephen Smalley (sdsat_private)
Date: Thu May 31 2001 - 11:16:22 PDT

  • Next message: jmjonesat_private: "Re: sys_setpriority error"

    On 31 May 2001, David Wagner wrote:
    > One disadvantage is that then each module writer has to cut-and-paste
    > the old code into his module if he wants to stick with the base logic
    > (and we can expect this to be common).  Moreover, if for any reason the
    > linux kernel developers ever need to change the base logic (e.g., someone
    > found a bug), they'd then need to change the code in every LSM, which
    > is probably impossible in practice.
    It seems that we should be able to address this problem by providing
    support for composing security modules with the dummy functions.
    I would also expect that we would want to allow for the easy
    composition of the capabilities plug with other security modules.
    Stephen D. Smalley, NAI Labs
    linux-security-module mailing list

    This archive was generated by hypermail 2b30 : Thu May 31 2001 - 11:18:22 PDT