lkml.org 
[lkml]   [2005]   [Mar]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH] [request for inclusion] Realtime LSM
    On Mon 07-03-05 23:30:57, Jack O'Quin wrote:
    > Andrew Morton <akpm@osdl.org> writes:
    >
    > > Matt Mackall <mpm@selenic.com> wrote:
    > >>
    > >> I think Chris Wright's last rlimit patch is more sensible and ready to
    > >> go.
    > >
    > > I must say that I like rlimits - very straightforward, although somewhat
    > > awkward to use from userspace due to shortsighted shell design.
    > >
    > > Does anyone have serious objections to this approach?
    >
    > 1. is likely to introduce multiuser system security holes like the one
    > created recently when the mlock() rlimits bug was fixed (DoS attacks)

    Default is unchanged and you claim your boxes are single-user-a-time,
    anyway.

    > 2. requires updates to all the shells

    No. Just set it during login.

    > 3. forces Windows and Mac musicians to learn and understand PAM

    While you force them to mess with security modules. I'd say thats and improvement.
    And "understanding PAM" in this case means updating two files, adding one
    line to each.

    > 4. is undocumented and has never been tested in any real music studios

    So write the docs and test it.

    Pavel
    --
    64 bytes from 195.113.31.123: icmp_seq=28 ttl=51 time=448769.1 ms

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 14:11    [W:3.443 / U:0.264 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site