Messages in this thread | ![/](/images/icornerl.gif) | | Date | Tue, 8 Mar 2005 18:55:04 -0500 (EST) | From | James Morris <> | Subject | Re: [PATCH] [request for inclusion] Realtime LSM |
| |
On Tue, 8 Mar 2005, Lee Revell wrote:
> I am still confused about why the LSM framework was merged in the first > place.
The purpose of LSM is to allow different security models to be implemented. IMHO, a security model here meaning a complete or otherwise significantly enhancing system-wide framework, such as SELinux.
I don't think LSM is a suitable framework for upstream merging of trivial or experimental access control enhancements. They should either be made part of the core kernel under LSM control or incorporated directly into an existing LSM.
One of the reasons I would put forward for this is that it can be dangerous to allow the user to arbitrarily compose security modules.
Also, from an architectural point of view, it's better to think about security models at a high level with broadly defined components (e.g. "DAC" and "MAC"), not as a collection of miscellaneous features.
In the case of this code, I would suggest integrating it into the core kernel, and providing an LSM hook to allow other LSMs to mediate it.
As an example, see the vm_enough_memory hook.
- James -- James Morris <jmorris@redhat.com>
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| ![\](/images/icornerr.gif) |