lkml.org 
[lkml]   [2004]   [Nov]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [RFC] [PATCH] [6/6] LSM Stacking: temporary setprocattr hack
Hi,

Quoting Chris Wright (chrisw@osdl.org):
> * Serge Hallyn (serue@us.ibm.com) wrote:
> > Stacker assumes that data written to /proc/<pid>/attr/* is of the
> > form:
> >
> > module_name: data
>
> This breaks current tools where fields are space-delimited. procps does
> filtering that way, and I believe libselinux does as well.

Oh, are you talking about the output of getprocattr? Perhaps the output
should (temporarily) be default list the selinux info on the first line,
without a "selinux: " prepended, and list any other modules after?

Or do you mean something else?

You mentioned a common LSM sysfs framework. Does it offer support for
both per-module and per-pid-per-module files? If so, then I suppose it
would be fair to force LSMs to use those, and reserve the existing
{gs}etprocattr files for selinux use (or nuke them).

-serge
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 14:07    [W:0.062 / U:0.468 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site