Messages in this thread | | | From | Samir Bellabes <> | Subject | Re: A basic question about the security_* hooks | Date | Thu, 24 Dec 2009 19:57:52 +0100 |
| |
Evgeniy Polyakov <zbr@ioremap.net> writes:
> I believe you should convice selinux and friends to add support for your > extension, otherwise no distribution will be able to turn it on, since > no two security frameworks can be registered simultaneously.
I agree, as a LSM module, this purpose is a no sense, because it will avoid using another security module. On the other hand, adding this capacity directly to the syscalls seems to be a little bit ugly (it reminds me security post_accept hook strategy of returning or not a value).
But the way to go is to add this directly to existing security models, if it make sens for them.
sam
| |