Hooks for MAC

Previous message: David Wagner: "Re: MAC before DAC vs DAC before MAC"
Next in thread: Crispin Cowan: "Re: Hooks for MAC"
Reply: Crispin Cowan: "Re: Hooks for MAC"
Reply: Chris Wright: "Re: Hooks for MAC"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

lachlan.mcilroyat_private

The attached patch contains hooks required for a MAC
system to moderate subject-subject control.  These hooks
can be used to ensure that only processes with read/write
label dominance can read/write attributes of another
process (ie GID, SID and scheduling parameters).  The
patch was generated from the 2.4.6 tree and I will post
a patch against 2.4.7 soon.

---
Lachlan McIlroy
Trusted Linux
Adacel Technologies Ltd