Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1750778AbWCaFjD (ORCPT ); Fri, 31 Mar 2006 00:39:03 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1750792AbWCaFjD (ORCPT ); Fri, 31 Mar 2006 00:39:03 -0500 Received: from ebiederm.dsl.xmission.com ([166.70.28.69]:51388 "EHLO ebiederm.dsl.xmission.com") by vger.kernel.org with ESMTP id S1750778AbWCaFjC (ORCPT ); Fri, 31 Mar 2006 00:39:02 -0500 To: Chris Wright Cc: "Serge E. Hallyn" , David Lang , Sam Vilain , Nick Piggin , Herbert Poetzl , Bill Davidsen , Linux Kernel ML Subject: Re: [RFC] Virtualization steps References: <442A26E9.20608@vilain.net> <20060329182027.GB14724@sorel.sous-sol.org> <442B0BFE.9080709@vilain.net> <20060329225241.GO15997@sorel.sous-sol.org> <20060330013618.GS15997@sorel.sous-sol.org> <20060330020445.GT15997@sorel.sous-sol.org> <20060330143224.GC6933@sergelap.austin.ibm.com> <20060330190758.GY15997@sorel.sous-sol.org> From: ebiederm@xmission.com (Eric W. Biederman) Date: Thu, 30 Mar 2006 22:36:03 -0700 In-Reply-To: <20060330190758.GY15997@sorel.sous-sol.org> (Chris Wright's message of "Thu, 30 Mar 2006 11:07:58 -0800") Message-ID: User-Agent: Gnus/5.1007 (Gnus v5.10.7) Emacs/21.4 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1046 Lines: 28 Chris Wright writes: >> With appropriate care we should be able to allow the container >> administrator to use this capability to select which security >> policies, and mechanisms they want. >> >> That is something we probably want to consider anyway as >> currently the security modules break the basic rule that >> compiling code in should not affect how the kernel operates >> by default. > > Don't follow you on this one. Very simple, it should be possible statically compile in all of the security modules and be able to pick at run time which security module to use. Unless I have been very blind and missed something skimming through the code compiling if I compile in all of the security modules, whichever one is initialized first is the one that we will use. Eric - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/