Messages in this thread | | | Date | Sat, 29 Dec 2007 16:29:29 -0800 (PST) | From | Casey Schaufler <> | Subject | Re: [PATCH] security: remove security_sb_post_mountroot hook |
| |
--- "H. Peter Anvin" <hpa@zytor.com> wrote:
> The security_sb_post_mountroot() hook is long-since obsolete, and is > fundamentally broken: it is never invoked if someone uses initramfs. > This is particularly damaging, because the existence of this hook has > been used as motivation for not using initramfs. > > Stephen Smalley confirmed on 2007-07-19 that this hook was originally > used by SELinux but can now be safely removed: > > http://marc.info/?l=linux-kernel&m=118485683612916&w=2 > > Cc: Stephen Smalley <sds@tycho.nsa.gov> > Cc: James Morris <jmorris@namei.org> > Cc: Eric Paris <eparis@parisplace.org> > Cc: Chris Wright <chrisw@sous-sol.org> > Signed-off-by: H. Peter Anvin <hpa@zytor.com>
It is also the case that Smack does not use this hook. It can be removed as far as I'm concerned.
Casey Schaufler casey@schaufler-ca.com
| |