Messages in this thread | | | Date | Wed, 24 Sep 2008 07:20:01 +1000 (EST) | From | James Morris <> | Subject | Re: [PATCH] Introduce new LSM hooks where vfsmount is available. |
| |
On Tue, 23 Sep 2008, Alexey Dobriyan wrote:
> > > > I don't see any technical errors in this patch. > > > > > > > > If it is going to be merged, please make a new config option for > > > > path-based hooks (similar to that for the network hooks), so they can be > > > > compiled out. > > Another pointless config option.
Why is it pointless? If distros don't want to use these hooks, they shouldn't have to have them enabled.
> > It's actually pretty surprising that SECURITY_NETWORK is > a) user-visible and b) is not SECURITY && NET. > > Same for SECURITY_NETWORK_XFRM.
IIRC, this option was a perquisite for merge. Networking hooks have a relatively high overhead and not everyone wants to use them, even if they have networking enabled.
- James -- James Morris <jmorris@namei.org>
| |