Re: new hook for do_sys_settimeofday

From: Stephen Smalley (sdsat_private)
Date: Mon Jul 22 2002 - 04:55:57 PDT

  • Next message: Robb Romans: "Re: new hook for do_sys_settimeofday"

    On Fri, 19 Jul 2002, Robb Romans wrote:
    
    > Here is a patch for adding a hook to control setting the system time in
    > kernel/time.c. We need this hook for our implementation of *BSD Secure
    > Levels as an LSM.
    >
    > You may note that sys_stime is not covered by this hook. There are a
    > couple of ways we are exploring to address this.
    >
    > Many thanks to Chris Wright and Seth Arnold for the help and patience.
    
    Such a hook was previously considered, but was not adopted since the
    CAP_SYS_TIME capability seemed sufficient to control these operations.
    Can you clarify why you need a finer-grained hook?
    
    --
    Stephen D. Smalley, NAI Labs
    ssmalleyat_private
    
    
    
    _______________________________________________
    linux-security-module mailing list
    linux-security-moduleat_private
    http://mail.wirex.com/mailman/listinfo/linux-security-module
    



    This archive was generated by hypermail 2b30 : Mon Jul 22 2002 - 04:57:49 PDT