Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S261509AbVCIAAf (ORCPT ); Tue, 8 Mar 2005 19:00:35 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S262411AbVCIAAX (ORCPT ); Tue, 8 Mar 2005 19:00:23 -0500 Received: from mx1.redhat.com ([66.187.233.31]:1244 "EHLO mx1.redhat.com") by vger.kernel.org with ESMTP id S261509AbVCHXz7 (ORCPT ); Tue, 8 Mar 2005 18:55:59 -0500 Date: Tue, 8 Mar 2005 18:55:04 -0500 (EST) From: James Morris X-X-Sender: jmorris@thoron.boston.redhat.com To: Lee Revell cc: Christoph Hellwig , Andrew Morton , Ingo Molnar , , , , , Chris Wright , Arjan van de Ven , Alan Cox , , Stephen Smalley Subject: Re: [PATCH] [request for inclusion] Realtime LSM In-Reply-To: <1110317673.5982.8.camel@mindpipe> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1386 Lines: 37 On Tue, 8 Mar 2005, Lee Revell wrote: > I am still confused about why the LSM framework was merged in the first > place. The purpose of LSM is to allow different security models to be implemented. IMHO, a security model here meaning a complete or otherwise significantly enhancing system-wide framework, such as SELinux. I don't think LSM is a suitable framework for upstream merging of trivial or experimental access control enhancements. They should either be made part of the core kernel under LSM control or incorporated directly into an existing LSM. One of the reasons I would put forward for this is that it can be dangerous to allow the user to arbitrarily compose security modules. Also, from an architectural point of view, it's better to think about security models at a high level with broadly defined components (e.g. "DAC" and "MAC"), not as a collection of miscellaneous features. In the case of this code, I would suggest integrating it into the core kernel, and providing an LSM hook to allow other LSMs to mediate it. As an example, see the vm_enough_memory hook. - James -- James Morris - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/