Messages in this thread | | | Date | Tue, 30 Nov 2004 13:03:20 -0800 | From | Chris Wright <> | Subject | Re: Syscall trouble |
| |
* Søren Nøhr Christensen (snc@cs.aau.dk) wrote: <snip> > +#define __NR_umb_set_child_restrictions 284 <snip>
> Any suggestions?
Don't do it this way. Use /proc/<pid>/attr/ interface if you only want to handle creating restrictions within a process. If you're using it to load your policy, then create a reasonable filesystem interface and do it that way. This will be portable across versions and architectures without allocating any syscalls.
thanks, -chris -- Linux Security Modules http://lsm.immunix.org http://lsm.bkbits.net - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |