ChangeSet 1.900, 2002/12/18 15:09:33-08:00, gregat_private LSM: Fix up the description of the root_plug code to try to make it clearer. diff -Nru a/security/Kconfig b/security/Kconfig --- a/security/Kconfig Wed Dec 18 15:13:33 2002 +++ b/security/Kconfig Wed Dec 18 15:13:33 2002 @@ -27,8 +27,11 @@ depends on SECURITY!=n help This is a sample LSM module that should only be used as such. - It enables control over processes being created by root users - if a specific USB device is not present in the system. + It prevents any programs running with egid == 0 if a specific + USB device is not present in the system. + + See <http://www.linuxjournal.com/article.php?sid=6279> for + more information about this module. If you are unsure how to answer this question, answer N. diff -Nru a/security/root_plug.c b/security/root_plug.c --- a/security/root_plug.c Wed Dec 18 15:13:33 2002 +++ b/security/root_plug.c Wed Dec 18 15:13:33 2002 @@ -13,6 +13,9 @@ * If you want to turn this into something with a semblance of security, * you need to hook the task_* functions also. * + * See http://www.linuxjournal.com/article.php?sid=6279 for more information + * about this code. + * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License as * published by the Free Software Foundation, version 2 of the _______________________________________________ linux-security-module mailing list linux-security-moduleat_private http://mail.wirex.com/mailman/listinfo/linux-security-module
This archive was generated by hypermail 2b30 : Wed Dec 18 2002 - 21:48:47 PST