Re: [RFC] [PATCH] Stacking through chaining (v3)

From: Chris Wright (chrisw@private)
Date: Tue Nov 30 2004 - 08:51:19 PST 

* Serge E. Hallyn (serue@private) wrote:
> Quoting Stephen Smalley (sds@private):
> Now...  why are unregister_security and mod_reg_security different, other
> than for symmetry?  Why couldn't we just have
> 
> int unregister_security(const char *name, struct security_operations *ops)
> {
> 	if (ops == security_ops) {
> 		security_ops = &dummy_security_ops;
> 		return 0;
> 	}
> 
> 	return security_ops->unregister_security(name, ops);
> }

We decided that a module should have full control over whether it's
primary or secondary.  Ideally, with stacking the mod_reg stuff could go
away.

thanks,
-chris
-- 
Linux Security Modules     http://lsm.immunix.org     http://lsm.bkbits.net

This archive was generated by hypermail 2.1.3 : Tue Nov 30 2004 - 08:51:35 PST