Messages in this thread | | | Subject | Re: [PATCH 2/4] integrity: Linux Integrity Module(LIM) | From | david safford <> | Date | Thu, 20 Nov 2008 14:21:38 -0500 |
| |
On Thu, 2008-11-20 at 12:45 -0500, Christoph Hellwig wrote: > Ok, the API looks sane to me. But one big question: any reason you > don't just directly call into your implementation instead of all these > odd hooks? This seems to be a lot of overhead just for making the code > less readable.. >
The consensus in the (insane) security community was to have an interface with selectable modules similar to LSM and its modules, so that users could easily choose among a set of integrity providers.
dave
| |