Re: [PATCH] remove sys_security

From: Mike Wray (mike_wrayat_private)
Date: Mon Oct 21 2002 - 06:54:33 PDT

  • Next message: Christoph Hellwig: "Re: [PATCH] remove sys_security"

    ----- Original Message -----
    From: Stephen Smalley <sdsat_private>
    To: Christoph Hellwig <hchat_private>
    Cc: <linux-kernelat_private>; <linux-security-moduleat_private>
    Sent: 18 October 2002 18:15
    Subject: Re: [PATCH] remove sys_security
    
    
    >
    > On Fri, 18 Oct 2002, Christoph Hellwig wrote:
    >
    > > It adds infrastructure to implement syscalls without peer review.
    > > And then it ends being crap like the selinux syscalls.
    >
    > Yes, I think you've made your point.  Go ahead, remove sys_security.
    > We can look into revising the SELinux syscalls, hopefully with some
    > constructive suggestions from people, to make them more acceptable.
    > Feel free to send specific suggestions, or at least explain further why
    > you hate the current ones.
    >
    
    I'm not sure the case for removal has been made. Some potential problems
    with the LSM security syscall have been pointed out. Isn't it better to
    consider
    fixes instead of ditching the syscall? Won't the absence of the syscall just
    result
    in even worse code being used? Presumably SELinux will have to implement
    the syscall functionality some other way.
    
    > > And exactly these hooks harm.  They are all over the place, have
    performance
    > > and code size impact and mess up readability.  Why can't you just
    maintain
    > > an external patch like i.e. mosix folks that nead similar deep changes?
    >
    > LSM only came into existence based on Linus' statements about what he
    > would be willing to consider for inclusion in the mainstream kernel.  Of
    > course, if LSM has diverged from Linus' expectations, then that divergence
    > should be corrected.  But that doesn't mean that LSM should be dropped out
    > entirely, just pruned and refined.  If the whole of LSM has to be
    > maintained as a separate patch, then the various security projects have
    > largely wasted their time transitioning to it.
    >
    
    Precisely. The whole reason for having LSM at all is that maintaining a
    kernel
    patch to add a security model is not sustainable. Adding a general kernel
    framework to support security was the agreed way to go, and that is what
    LSM does.
    
    After the latest changes the LSM framework hurts no-one who
    isn't using it, so I see no reason to ditch it. If there are
    remaining problems let's fix them - not ditch the approach.
    
    Mike
    
    
    _______________________________________________
    linux-security-module mailing list
    linux-security-moduleat_private
    http://mail.wirex.com/mailman/listinfo/linux-security-module
    



    This archive was generated by hypermail 2b30 : Mon Oct 21 2002 - 10:06:18 PDT