[lkml]   [2006]   [Jun]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH 2/3] SELinux: add security_task_movememory calls to mm code
    * Serge E. Hallyn ( wrote:
    > sorry if I'm being dense - what is actually being protected against
    > here? The only thing I can think of is one process causing performance
    > degradation to another by moving it's memory further from it's cpu on a
    > NUMA machine.

    There's been a short series of patches (plus a short doc from James) to
    deal with code that's already doing uid/euid capable() checks w/out a
    corresponding LSM hook. IOW, it's already been recognized as security
    sensitive and has DAC check w/out corresponding MAC check. It's a small
    issue with relatively minor security impacts, but is completing

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2006-06-22 21:25    [W:0.019 / U:20.700 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site