Messages in this thread |  | | | From | Paul Moore <> | | Subject | Re: [PATCH] Version 4 (2.6.23-rc8-mm2) Smack: Simplified Mandatory Access Control Kernel | | Date | Wed, 3 Oct 2007 08:19:14 -0400 |
| |
On Wednesday 03 October 2007 12:45:42 am Casey Schaufler wrote: > From: Casey Schaufler <casey@schaufler-ca.com> > > Smack is the Simplified Mandatory Access Control Kernel. > > Smack implements mandatory access control (MAC) using labels > attached to tasks and data containers, including files, SVIPC, > and other tasks. Smack is a kernel based scheme that requires > an absolute minimum of application support and a very small > amount of configuration data. > > {snip} > > This patch includes changes made by Paul Moore <paul.moore@hp.com> > in support of a more comfortable interface to initialize the > CIPSO code from within the kernel. The changes in the net directory > are Pauls, as is the update to netlabel.h
My sign-off got lost when Casey smooshed the patch I sent him into the SMACK mega-patch so I'll throw it back in the thread for accounting purposes.
Signed-off-by: Paul Moore <paul.moore@hp.com>
As for SMACK's use of NetLabel - it looks fine to me, especially now that there is better preservation of the NetLabel/LSM boundary. As has been discussed on the various lists during earlier revisions of the patch I believe there are still some optimizations that can be made regarding how SMACK uses NetLabel but that is something we can always work on at a later date.
Acked-by: Paul Moore <paul.moore@hp.com>
-- paul moore linux security @ hp - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
|  |