Re: Maintaining LSM modules

From: Stephen Smalley (sdsat_private)
Date: Mon Apr 15 2002 - 11:35:30 PDT

  • Next message: Greg KH: "Re: Maintaining LSM modules"

    On Mon, 15 Apr 2002, Greg KH wrote:
    
    > Chris has talked about exporting all of the dummy_* functions, but this
    > still requires some work by the security module developer as new
    > functions are added.  I would accept this solution, but what does
    > everyone else think?
    
    I don't think that you need to export the dummy functions.  A security
    module can save a reference to the dummy operations by saving the original
    security_ops pointer prior to registering itself.  The SELinux module does
    this as part of its support for stacking with either the dummy or
    capabilities modules.  See the usage of original_ops and secondary_ops in
    the SELinux module.  Notice that the SELinux module can always safely call
    secondary_ops.
    
    --
    Stephen D. Smalley, NAI Labs
    ssmalleyat_private
    
    
    
    _______________________________________________
    linux-security-module mailing list
    linux-security-moduleat_private
    http://mail.wirex.com/mailman/listinfo/linux-security-module
    



    This archive was generated by hypermail 2b30 : Mon Apr 15 2002 - 11:37:29 PDT