Re: [RFC] [PATCH] Replace security fields with hashtable

From: Stephen Smalley (sds@private)
Date: Fri Oct 29 2004 - 05:13:29 PDT


On Thu, 2004-10-28 at 15:50, Mimi Zohar wrote:
> None of the LSM security modules, other than perhaps Stacker, should be
> builtin, but
> should be loaded in the initrd.

Not an option for any security module that wants to label and control
all kernel objects, like SELinux.  SELinux required introduction of a
separate security_initcall() in order to support early initialization
before normal module initialization occurs, even for built-in modules.

-- 
Stephen Smalley <sds@private>
National Security Agency



This archive was generated by hypermail 2.1.3 : Fri Oct 29 2004 - 05:17:50 PDT