lkml.org 
[lkml]   [2010]   [Jun]   [29]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH v4] security: Yama LSM
On Mon, 28 Jun 2010, Kees Cook wrote:

> This adds the Yama Linux Security Module to collect several security
> features (symlink, hardlink, and PTRACE restrictions) that have existed
> in various forms over the years and have been carried outside the mainline
> kernel by other Linux distributions like Openwall and grsecurity.
>
> Signed-off-by: Kees Cook <kees.cook@canonical.com>

There were no further complaints, and we seem to have reached a workable
consensus on the topic.

It's not clear yet whether existing LSMs will modify their base policies
to incorporate these protections, utilize the Yama code more directly, or
implement some combination of both.

If you're a user of an existing LSM and want these protections, bug the
developers for a solution :-)

Applied to
git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/security-testing-2.6#next

--
James Morris
<jmorris@namei.org>


\
 
 \ /
  Last update: 2010-06-30 01:21    [W:0.133 / U:0.668 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site