Messages in this thread | | | Date | Fri, 7 Mar 2008 17:08:08 +0000 | From | Al Viro <> | Subject | Re: [PATCH 5/9] Make use of permissions, returned by kobj_lookup |
| |
On Fri, Mar 07, 2008 at 09:01:04AM -0800, Greg KH wrote:
> Again, I object to this as you are driving a new security policy > infrastructure into the device node logic where it does not belong as we > already have this functionality in the LSM interface today. Please use > that one instead and don't clutter up the kernel with "one-off" security > changes like this one. > > Please try the LSM interface and see what happens. If, after you have > created a patch, you still have objections, please post it for review > and I will be glad to revisit my opinion at that time.
Not that per-container mappings on that level made any kind of sense in the first place...
| |