Re: Possible system call interface for LSM

Previous message: Stephen Smalley: "Re: [patch] Socket Receive Hook"
In reply to: David Wagner: "Re: Possible system call interface for LSM"
Next in thread: richard offer: "Re: Possible system call interface for LSM"
Next in thread: jmjonesat_private: "Re: Possible system call interface for LSM"
Reply: richard offer: "Re: Possible system call interface for LSM"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

sarnoldat_private

On Sat, Aug 11, 2001 at 01:20:00AM +0000, David Wagner wrote:
> Here we would have to tell admins that they can rmmod a LSM, but to
> install a new LSM they have to reboot (or else kill all process that
> might have used an extended syscall).  The need to reboot every time
> you rmmod a LSM seems pretty ugly.

But it does make sense to ask the admins to stop running module-specific
applications when changing modules.

_______________________________________________
linux-security-module mailing list
linux-security-moduleat_private
http://mail.wirex.com/mailman/listinfo/linux-security-module