Re: MAC before DAC vs DAC before MAC

From: Greg KH (gregat_private)
Date: Fri Jul 27 2001 - 18:48:01 PDT

  • Next message: jmjonesat_private: "Re: MAC before DAC vs DAC before MAC"

    On Fri, Jul 27, 2001 at 02:42:24PM -0700, Crispin Cowan wrote:
    > 
    > It is rather complex.  If we go with the macro approach to hooks, then it might be
    > feasible, but even then it is scary.  This code snippet has two local variables and
    > is stateful.  That makes it rather tricky to implement and use safely in a macro.
    
    Actually at the LSM BOF at OLS yesterday, Peter Loscocco reminded me
    that Linus had said at the 2.5 kernel summit that he wanted the hooks to
    not be macros or #ifdefs in the code.  So the macro approach for hooks
    will probably not happen (not that we were thinking it would.)
    
    greg k-h
    
    _______________________________________________
    linux-security-module mailing list
    linux-security-moduleat_private
    http://mail.wirex.com/mailman/listinfo/linux-security-module
    



    This archive was generated by hypermail 2b30 : Fri Jul 27 2001 - 18:51:31 PDT