lkml.org 
[lkml]   [2001]   [Apr]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectLinux Security Module Interface
    One of the byproducts of the Linux 2.5 Kernel Summit
    http://lwn.net/2001/features/KernelSummit/ was the notion of an
    enhancement of the loadable kernel module interface to facilitate
    security-oriented kernel modules. The purpose is to ease the tension
    between folks (such as Immunix and SELinux) who want to add substantial
    security capabilities to the kernel, and other folks who want to
    minimize kernel bloat & have no use for such security extensions.

    Modules that can be loaded, or not, are the obvious solution, but the
    current LKM does not export sufficient hooks to support many security
    mechanisms. Thus many current security enhancements end up existing as
    kernel patches, which marginalizes their utility by making distribution
    problematic. The proposed solution is to enhance the LKM with a variety
    of new kernel elements exported to the module interface, so as to
    support a reasonable variety of security enhancements.

    We have started a new mailing list called linux-security-module. The
    charter is to design, implement, and maintain suitable enhancements to
    the LKM to support a reasonable set of security enhancement packages.
    The prototypical module to be produced would be to port the POSIX Privs
    code out of the kernel and make it a module. An essential part of this
    project will be that the resulting work is acceptable for the mainline
    Linux kernel.

    The list is open to all. You can subscribe here
    http://mail.wirex.com/mailman/listinfo/linux-security-module or by
    sending e-mail to linux-security-module-request@wirex.com with a subject
    of "subscribe".

    Crispin

    --
    Crispin Cowan, Ph.D.
    Chief Scientist, WireX Communications, Inc. http://wirex.com
    Security Hardened Linux Distribution: http://immunix.org



    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 13:25    [W:0.043 / U:3.640 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site