Messages in this thread | | | Date | Wed, 5 Oct 2005 15:31:59 -0400 (EDT) | From | James Morris <> | Subject | Re: [Keyrings] [PATCH] Keys: Add LSM hooks for key management |
| |
On Wed, 5 Oct 2005, David Howells wrote:
> > Any reason why this is configurable? > > Well, I saw that the network stuff was. I can make it non-configurable. > > > Why wouldn't someone want this? > > Speed/latency? But I suppose that's not really a factor.
Yes, the networking is for performance, especially from when we used to register Netfilter hooks from within LSM. I don't know of any distros that enable LSM but disable networking so we should probably think about removing that as well.
> What about the security ops for keys that I've made available? Does doing it > that way seem reasonable?
Not sure yet, need to spend some time looking at this from an SELinux point of view.
- James -- James Morris <jmorris@namei.org> - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |