Messages in this thread | | | Date | Thu, 25 Sep 2008 07:18:38 +1000 (EST) | From | James Morris <> | Subject | Re: [PATCH] Introduce new LSM hooks where vfsmount is available. |
| |
On Wed, 24 Sep 2008, Serge E. Hallyn wrote:
> Quoting Kentaro Takeda (takedakn@nttdata.co.jp):
[please trim quoted material..]
> > > > +config SECURITY_PATH > > + bool "Security hooks for pathname based access control" > > + depends on SECURITY > > + help > > + This enables the security hooks for pathname based access control. > > + If enabled, a security module can use these hooks to > > + implement pathname based access controls. > > + If you are unsure how to answer this question, answer N. > > Is there any reason why users should have to deal with this option? > Would it make sense in this case to make the option and have tomoyo and > apparmor select it?
Who are users in this case? It's probably useful as a separate option for testing purposes and for people doing development. LSMs which depend on it should probably still use SELECT in any case.
-- James Morris <jmorris@namei.org>
| |