Messages in this thread | | | Date | Fri, 18 Dec 2009 17:20:54 +0000 | From | Alan Cox <> | Subject | Re: [PATCH 1/3] Security: Add prctl(PR_{GET,SET}_NETWORK) |
| |
> the LSM-based version *does not* resolve the situation to my satisfaction as a > userland hacker due to the well-known and long-standing adoption and > compositionality problems facing small LSMs. ;)
For things like Fedora it's probably an "interesting idea, perhaps we should do it using SELinux" sort of problem, but a config option for a magic network prctl is also going to be hard to adopt without producing a good use case - and avoiding that by dumping crap into everyones kernel fast paths isn't a good idea either.
| |