On Wed 19-04-06 21:06:57, Jan Engelhardt wrote:
> >>
> >> Well then, have a look at http://alphagate.hopto.org/multiadm/
> >>
> >
> >hmm on first sight that seems to be basically an extension to the
> >existing capability() code... rather than a 'real' LSM module. Am I
> >missing something here?
> >
>
> (So what's the definition for a "real" LSM module?)
>
> It's quite a "big" extension to the capability code inasfar as that
> access is not solely granted based on capabilities, but a matrix of
> capabilities plus UID/GID of filesystem objects.
>
> This is not a "for fun" LSM like rootplug, but it was specifically
> developed to address some permission issues in an educational institution.
> The LSM hooks were there (and some more are added with MultiAdm), and it
> seemed a lot simpler than setting up SELinux.
Easier to setup does not seem like good reason for changing kernel,
I'm afraid. Surely selinux can be improved or
userland-educational-selinux created?
Pavel
--
Thanks, Sharp!
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
[Index of Archives]
[Kernel Newbies]
[Netfilter]
[Bugtraq]
[Photo]
[Stuff]
[Gimp]
[Yosemite News]
[MIPS Linux]
[ARM Linux]
[Linux Security]
[Linux RAID]
[Video 4 Linux]
[Linux for the blind]
[Linux Resources]
