Messages in this thread | | | Subject | Re: Time to remove LSM (was Re: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks) | From | Valdis.Kletnieks@vt ... | Date | Wed, 19 Apr 2006 13:00:17 -0400 |
| |
On Wed, 19 Apr 2006 10:16:46 +0200, Jan Engelhardt said:
> >So, I think the only way to be able to realisticly keep the LSM > >interface, is for a valid, working, maintained LSM-based security model > >to go into the kernel tree. So far, I haven't seen any public posting > >of patches that meet this requirement :( > > In that case, maybe it would be worthwhile to flip the positions, i.e. LSM on > top of SELinux, sort of a compat layer.
How would that *possibly* work? What semantics would *that* have?
[unhandled content-type:application/pgp-signature] | |