[PATCH] security_task_lookup hook

From: Serge Hallyn (serue@private)
Date: Mon Aug 16 2004 - 11:45:33 PDT 

Attached is a proposed patch to implement a security_task_lookup hook. 
The included bsdjail.c file is an example user.  Vserver is another
obvious potential user.

This hook is called when filling in the list of per-process directories
under /proc.  Returning non-0 allows a LSM to hide the existance of a
process.  Note that we do not attempt to hide the generic existance of
other processes :)  That would require normalizing process cpu and mem
usage statistics, etc.

Please review and discuss.

thanks,
-serge
-- 
=======================================================
Serge Hallyn
Security Software Engineer, IBM Linux Technology Center
serue@private

This archive was generated by hypermail 2.1.3 : Mon Aug 16 2004 - 10:42:13 PDT