Messages in this thread | | | Date | Fri, 14 Mar 2008 00:50:51 +1100 (EST) | From | James Morris <> | Subject | Re: [RFC] cgroups: implement device whitelist lsm (v2) |
| |
On Thu, 13 Mar 2008, Serge E. Hallyn wrote:
> That does make for a simpler implementation at this point, however if > any other such LSMs come along (as Casey seemed to think they would) the > end result could end up being horrible spaghetti code of dependencies > and interrelated configs.
That can be addressed as the need arises. A basic tenet of kernel development is to avoid speculative infrastructure.
> But OTOH we went years with no such changes, so that's probably not a > particularly practical concern unless someone can cite specific upcoming > examples. So if noone objects I'll try that approach.
-- James Morris <jmorris@namei.org>
| |