Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1756528AbYCNQP6 (ORCPT ); Fri, 14 Mar 2008 12:15:58 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1752653AbYCNQPs (ORCPT ); Fri, 14 Mar 2008 12:15:48 -0400 Received: from sacred.ru ([62.205.161.221]:56824 "EHLO sacred.ru" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751798AbYCNQPr (ORCPT ); Fri, 14 Mar 2008 12:15:47 -0400 Message-ID: <47DA9FC2.7060405@openvz.org> Date: Fri, 14 Mar 2008 18:54:42 +0300 From: Pavel Emelyanov User-Agent: Thunderbird 2.0.0.12 (X11/20080213) MIME-Version: 1.0 To: "Serge E. Hallyn" CC: Greg KH , James Morris , lkml , linux-security-module@vger.kernel.org, Stephen Smalley , Casey Schaufler Subject: Re: [RFC] cgroups: implement device whitelist lsm (v2) References: <20080313131818.GA9771@sergelap.austin.ibm.com> <20080313143803.GA11265@sergelap.austin.ibm.com> <20080313224616.GA9139@sergelap.austin.ibm.com> <20080314014121.GA8320@sergelap.austin.ibm.com> <20080314044741.GB18077@kroah.com> <20080314135416.GD8744@sergelap.austin.ibm.com> <47DA848C.3070901@openvz.org> <20080314154537.GA6604@sergelap.austin.ibm.com> In-Reply-To: <20080314154537.GA6604@sergelap.austin.ibm.com> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Greylist: Sender succeeded SMTP AUTH authentication, not delayed by milter-greylist-3.0 (sacred.ru [62.205.161.221]); Fri, 14 Mar 2008 18:54:46 +0300 (MSK) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1267 Lines: 36 Serge E. Hallyn wrote: > Quoting Pavel Emelyanov (xemul@openvz.org): >> [snip] >> >>>> My main question was why was that file in the kernel/ directory? >>>> Shouldn't that also be in the security/ directory? >>> I'm using cgroups to track the tasks which should have their device >>> permissions restricted. Right now cgroups are all under kernel/. >> No. Memory cgroup is under mm/ :) > > Ah. > > Guess it could all go under security/. Should it still go there even if > we make it not use lsm? Sure it can - security/ is in obj-y regardless of whether the SECURITY itself is on or off :) >>>> And to be honest, I didn't really look at it at all other than the >>>> diffstat to make sure you weren't messing with the kobj_map stuff >>>> anymore :) >>>> >>>> thanks, >>>> >>>> greg k-h >>>> -- >>>> To unsubscribe from this list: send the line "unsubscribe linux-security-module" in >>>> the body of a message to majordomo@vger.kernel.org >>>> More majordomo info at http://vger.kernel.org/majordomo-info.html > -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/