lkml.org 
[lkml]   [2001]   [Jul]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Security hooks, "standard linux security" & embedded use
On Thu, Jul 12, 2001 at 07:37:36PM +0100, Anton Altaparmakov wrote:
>
> This seems very good in view of implementing ACL support for NTFS, too. -
> We have all the NTFS layout knowledge to do it now. We just lack the
> kernel/user space infrastructure.
>
> When designing this modular security infrastructure it would be useful if
> it is made generic enough to allow callbacks into user space for permission
> checking.

The current model lets you do whatever you want in your kernel module.
It imposes no policy, that's up to you.

All the better to keep userspace callbacks for security out of my
kernels, for that way is ripe for problems (for specific examples why,
see the linux-security-module mailing list archives.)

thanks,

greg k-h
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 12:57    [W:1.202 / U:0.016 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site