Messages in this thread | | | Date | Fri, 7 Jan 2005 09:53:10 -0800 | From | Chris Wright <> | Subject | Re: [PATCH] [request for inclusion] Realtime LSM |
| |
* Paul Davis (paul@linuxaudiosystems.com) wrote: > So, we have a few responses, some references to various potential > solutions all of which have problems just as deep if not deeper than > the uid/gid-based model that this particular LSM adopts. No proposal > for any system that would actually work and address anyone's real > needs in a useful way.
I don't think that's quite true. One repeated recommendation was to simply generalize the idea so that it applies to all capabilities. Another, which at this point appears quite workable, was Arjan's recommendation to make scheduling policy/priority protected by an rlimit (complicated only by representing the combinations sanely in a single number).
thanks, -chris -- Linux Security Modules http://lsm.immunix.org http://lsm.bkbits.net - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |