On Tue, 2004-06-29 at 11:49, James Morris wrote: > The optimization for a single LSM is good, but won't the common case be > two LSMs (e.g. capabilities + something else) ? If so, I'd suggest having > two statically allocated entries as primary & secondary, then any further > LSMs can be stacked dynamically. Even then, unless a distro was planning > on shipping three or more stacked LSMs by default, I'd wonder if it was > really going to be useful in a wider sense. That seems reasonable, although the capabilities module doesn't actually need to use the security fields at present. -- Stephen Smalley <sds@private> National Security Agency
This archive was generated by hypermail 2b30 : Tue Jun 29 2004 - 08:55:23 PDT