On Fri, 19 Jul 2002, Robb Romans wrote: > Here is a patch for adding a hook to control setting the system time in > kernel/time.c. We need this hook for our implementation of *BSD Secure > Levels as an LSM. > > You may note that sys_stime is not covered by this hook. There are a > couple of ways we are exploring to address this. > > Many thanks to Chris Wright and Seth Arnold for the help and patience. Such a hook was previously considered, but was not adopted since the CAP_SYS_TIME capability seemed sufficient to control these operations. Can you clarify why you need a finer-grained hook? -- Stephen D. Smalley, NAI Labs ssmalleyat_private _______________________________________________ linux-security-module mailing list linux-security-moduleat_private http://mail.wirex.com/mailman/listinfo/linux-security-module
This archive was generated by hypermail 2b30 : Mon Jul 22 2002 - 04:57:49 PDT