Re: Possible system call interface for LSM

From: richard offer (offerat_private)
Date: Fri Aug 10 2001 - 17:01:31 PDT

  • Next message: Greg KH: "Re: Possible system call interface for LSM"

    * frm gregat_private "08/10/01 16:33:24 -0700" | sed '1,$s/^/* /'
    *
    * 
    * Ah, but Stephans program should first validate that the kernel is
    * running SELinux by some other method than the syscall (I've detailed
    * that in a previous message).  And so should yours.  So there will be no
    * conflicts if you validate that your module is loaded before calling the
    * syscall.
    
    I could have no way to determine if my policy is loaded. Seriously, I
    don't. Audit is invisible, so is MAC.
    
    I'm not going to go and create a pseudo file system just to let
    applications know that my policy is loaded. That's bogus. You'd rather
    increase the kernel size than pass one extra parameter?
    
    * 
    * greg k-h
    * 
    
    richard.
    
    -----------------------------------------------------------------------
    Richard Offer                     Technical Lead, Trust Technology, SGI
    "Specialization is for insects"
    _______________________________________________________________________
    
    
    _______________________________________________
    linux-security-module mailing list
    linux-security-moduleat_private
    http://mail.wirex.com/mailman/listinfo/linux-security-module
    



    This archive was generated by hypermail 2b30 : Fri Aug 10 2001 - 17:08:03 PDT