Messages in this thread | | | Date | Thu, 17 Oct 2002 11:53:52 -0700 | From | Greg KH <> | Subject | Re: [PATCH] remove sys_security |
| |
On Thu, Oct 17, 2002 at 07:50:16PM +0100, Christoph Hellwig wrote: > I've been auditing the LSM stuff a bit more.. > > They have registered an implemented a syscall, sys_security > that does nothing but switch into the individual modules > based on the first argument, i.e. it's ioctl() switching > on the security module instead of device node. Yuck. > > Patch below removes it (no intree users), maybe selinux/etc > folks should send their actual syscall for review instead..
No, don't remove this! Yes, it's a big switch, but what do you propose otherwise? SELinux would need a _lot_ of different security calls, which would be fine, but we don't want to force every security module to try to go through the process of getting their own syscalls.
And other subsystems in the kernel do the same thing with their syscall, like networking, so there is a past history of this usage.
Linus, please do not apply.
thanks,
greg k-h - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |