[lkml]   [2001]   [Apr]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectLinux Security Module Interface
    One of the byproducts of the Linux 2.5 Kernel Summit was the notion of an
    enhancement of the loadable kernel module interface to facilitate
    security-oriented kernel modules. The purpose is to ease the tension
    between folks (such as Immunix and SELinux) who want to add substantial
    security capabilities to the kernel, and other folks who want to
    minimize kernel bloat & have no use for such security extensions.

    Modules that can be loaded, or not, are the obvious solution, but the
    current LKM does not export sufficient hooks to support many security
    mechanisms. Thus many current security enhancements end up existing as
    kernel patches, which marginalizes their utility by making distribution
    problematic. The proposed solution is to enhance the LKM with a variety
    of new kernel elements exported to the module interface, so as to
    support a reasonable variety of security enhancements.

    We have started a new mailing list called linux-security-module. The
    charter is to design, implement, and maintain suitable enhancements to
    the LKM to support a reasonable set of security enhancement packages.
    The prototypical module to be produced would be to port the POSIX Privs
    code out of the kernel and make it a module. An essential part of this
    project will be that the resulting work is acceptable for the mainline
    Linux kernel.

    The list is open to all. You can subscribe here or by
    sending e-mail to with a subject
    of "subscribe".


    Crispin Cowan, Ph.D.
    Chief Scientist, WireX Communications, Inc.
    Security Hardened Linux Distribution:

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 13:25    [W:0.025 / U:4.084 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site