Re: LSM for 2.6 kernel

From: Stephen Smalley (sds@private)
Date: Fri Feb 13 2004 - 08:38:02 PST

  • Next message: Torben Krause: "selinux-policy parsing error"

    On Wed, 2004-02-11 at 16:48, Valdis.Kletnieks@private wrote:
    > On Wed, 11 Feb 2004 14:43:59 CST, Niki Rahimi said:
    > 
    > > Yes, but this does not include the latest patch, correct?
    > 
    > I think all the extant patches were in 2.6.2, except for the
    > 3 context-mount patches, a devfs patch, and one other patch.
    
    I think she means the latest LSM patch, not pending upstream changes for
    SELinux.  The LSM BitKeeper tree has various additional hooks, some
    rejected for 2.5/6 and some not yet submitted due to a lack of a
    specific user, and various security modules that have not yet been
    submitted upstream.
    
    It might be a good idea to clone a new LSM BitKeeper tree from mainline
    and only commit the additional security modules and any additional hooks
    on which they specifically rely.  That should ease updating the LSM tree
    from mainline, and should ease generating diffs from the LSM tree to go
    to mainline.  The old LSM BitKeeper tree could still be kept around for
    historical purposes.
    
    Since SELinux is in the mainline kernel, we have just been working
    directly off of it for some time, although we naturally post proposed
    changes to LSM to the LSM list as well.
      
    -- 
    Stephen Smalley <sds@private>
    National Security Agency
    



    This archive was generated by hypermail 2b30 : Fri Feb 13 2004 - 08:38:56 PST