Re: Trustees Linux for 2.6 kernel

From: Chris Wright (chrisw@private)
Date: Tue Nov 02 2004 - 11:21:56 PST


* Andrew Ruder (aeruder@private) wrote:
> In regards to an off-list email I received, I am unsure about the 
> stacking capabilities of the lsm api.

Only functionality is provided via the first registered security module.
Subsequent registrations are done directly to the primary which can
manage stacking as it sees fit.

> As of right now, the module 
> doesn't even attempt to register itself as a secondary module. It does 
> not currently (and I do not plan to) even use any security fields of the 
> various kernel structures, so perhaps that makes it more easily 
> stackable?

Yes, it does.

thanks,
-chris
--
Linux Security Modules     http://lsm.immunix.org     http://lsm.bkbits.net



This archive was generated by hypermail 2.1.3 : Tue Nov 02 2004 - 11:22:42 PST