Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932953AbXK2Sk4 (ORCPT ); Thu, 29 Nov 2007 13:40:56 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1761206AbXK2Skp (ORCPT ); Thu, 29 Nov 2007 13:40:45 -0500 Received: from nf-out-0910.google.com ([64.233.182.189]:63788 "EHLO nf-out-0910.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1759497AbXK2Sko (ORCPT ); Thu, 29 Nov 2007 13:40:44 -0500 DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=received:message-id:date:from:sender:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; b=ds81MPRHYAV7W4scFxV9vqTX4ffMhWfo2LkcJVebOGrYPfYcCt4kVxjIZoGk4ZuvthzIH9v5RGqzzhOB3dU/+d8XmN4if1FGYwRcq/AgTSdmr2WVnL+5CX9PyQMPUJVkXadEfDskKZbMB4M0vsCWo9GKKqxvj0/e89vm107jhno= Message-ID: <2c0942db0711291040j4ce48acagb753b64c4b8c1357@mail.gmail.com> Date: Thu, 29 Nov 2007 10:40:39 -0800 From: "Ray Lee" To: "Alan Cox" Subject: Re: Out of tree module using LSM Cc: tvrtko.ursulin@sophos.com, "Al Viro" , "Casey Schaufler" , "Christoph Hellwig" , linux-kernel@vger.kernel.org, Valdis.Kletnieks@vt.edu In-Reply-To: <20071129173601.34273083@the-village.bc.nu> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <20071128183040.GW8181@ftp.linux.org.uk> <20071129173601.34273083@the-village.bc.nu> X-Google-Sender-Auth: c46d8eedfcf5188f Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 767 Lines: 15 On Nov 29, 2007 9:36 AM, Alan Cox wrote: > > closed. But more importantly further access to it can be blocked until > > appropriate actions are taken which also applies with your example, no? Is > > That bit is hard- very hard. In some sense it seems like the same problem faced by dynamic translators such as Qemu. They really want to vet a dirtied or faulted page before allowing the app to run unhindered. It's be nice to have some way to do that without virtualizing the whole of userspace. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/