On Wed, 19 Apr 2006 10:16:46 +0200, Jan Engelhardt said: > >So, I think the only way to be able to realisticly keep the LSM > >interface, is for a valid, working, maintained LSM-based security model > >to go into the kernel tree. So far, I haven't seen any public posting > >of patches that meet this requirement :( > > In that case, maybe it would be worthwhile to flip the positions, i.e. LSM on > top of SELinux, sort of a compat layer. How would that *possibly* work? What semantics would *that* have?
Attachment:
pgpAIKjxmNmuu.pgp
Description: PGP signature
- References:
- [RFC] packet/socket owner match (fireflier) using skfilter
- From: Török Edwin <[email protected]>
- [RFC][PATCH 2/7] implementation of LSM hooks
- From: Török Edwin <[email protected]>
- Re: [RFC][PATCH 2/7] implementation of LSM hooks
- From: Stephen Smalley <[email protected]>
- Re: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks
- From: Török Edwin <[email protected]>
- Re: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks
- From: Stephen Smalley <[email protected]>
- Re: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks
- From: Christoph Hellwig <[email protected]>
- Re: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks
- From: Stephen Smalley <[email protected]>
- Re: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks
- From: Christoph Hellwig <[email protected]>
- Time to remove LSM (was Re: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks)
- From: James Morris <[email protected]>
- Re: Time to remove LSM (was Re: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks)
- From: Greg KH <[email protected]>
- Re: Time to remove LSM (was Re: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks)
- From: Jan Engelhardt <[email protected]>
- [RFC] packet/socket owner match (fireflier) using skfilter
- Prev by Date: Re: [RFC] Netlink and user-space buffer pointers
- Next by Date: Possible MTD bug in 2.6.15
- Previous by thread: Re: Time to remove LSM (was Re: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks)
- Next by thread: Re: Time to remove LSM (was Re: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks)
- Index(es):
![]() |