lkml.org 
[lkml]   [2005]   [Oct]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [Keyrings] [PATCH] Keys: Add LSM hooks for key management
On Wed, 5 Oct 2005, David Howells wrote:

> > Any reason why this is configurable?
>
> Well, I saw that the network stuff was. I can make it non-configurable.
>
> > Why wouldn't someone want this?
>
> Speed/latency? But I suppose that's not really a factor.

Yes, the networking is for performance, especially from when we used to
register Netfilter hooks from within LSM. I don't know of any distros
that enable LSM but disable networking so we should probably think about
removing that as well.

> What about the security ops for keys that I've made available? Does doing it
> that way seem reasonable?

Not sure yet, need to spend some time looking at this from an SELinux
point of view.


- James
--
James Morris
<jmorris@namei.org>
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-10-05 21:33    [W:0.047 / U:0.356 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site