Re: [RFC] LSM changes for 2.5.38

Greg KH (greg@kroah.com)
Fri, 27 Sep 2002 09:34:19 -0700


On Fri, Sep 27, 2002 at 08:09:50AM -0400, Stephen Smalley wrote:
>
> > Also is there a _real_ need to pass in all the arguments?
>
> Define _real_. It is true that none of the existing open source security
> modules presently use this particular hook. SELinux doesn't presently use
> it, but it seems reasonable to support finer-grained control over ioperm()
> than the all-or-nothing CAP_SYS_RAWIO. Is the criteria that every hook
> and every parameter to every hook must be used by an existing open source
> security module? If so, then yes, this hook can be dropped.

Yes, I think that is the criteria for any security hook. So it (and
others) should be dropped.

thanks,

greg k-h
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/