Re: Possible system call interface for LSM

From: Jesse Pollard (pollardat_private)
Date: Fri Aug 10 2001 - 07:29:06 PDT

  • Next message: richard offer: "Re: Possible system call interface for LSM"

    This may not be portable, but for debugging/testing/evaluating on Intel
    CPUs isn't it possible to use a SYSEXIT trap to implement an arbitrary
    system call list?
    
    If a test module initialized the trap it would be possible to implement
    any kernel transitions, as long as it were implemented in the same way
    as the default system calls. Then, after testing/debugging, the new
    system calls could be added to the standard list with a more permanent
    assignment.
    
    I admit to a limited knowlege here, but when I worked on embeded systems
    this technique was used so as to not affect the existing system.
    
    (This might be more work than it's worth, but a thought..)
    
    -------------------------------------------------------------------------
    Jesse I Pollard, II
    Email: pollardat_private
    
    Any opinions expressed are solely my own.
    
    _______________________________________________
    linux-security-module mailing list
    linux-security-moduleat_private
    http://mail.wirex.com/mailman/listinfo/linux-security-module
    



    This archive was generated by hypermail 2b30 : Fri Aug 10 2001 - 07:30:47 PDT