Re: [RFC] LSM changes for 2.5.38

Valdis.Kletnieks@vt.edu
Fri, 27 Sep 2002 14:54:25 -0400


--==_Exmh_-1139728314P
Content-Type: text/plain; charset=us-ascii

On Fri, 27 Sep 2002 19:19:43 BST, Christoph Hellwig said:

> So I have to download the driver source and change the parameter
> to i_m_to_fscking_intelligent_for_the_nsa_eth=0?

By the same token, at that point you can download the kernel source and
build it without LSM. What I showed was a way to bypass the iptables
rules set up *WITHOUT REPLACING A MODULE* (which might be detected by
tripwire, or totally refused because the LSM rejects any writes in /lib/modules).

-- 
				Valdis Kletnieks
				Computer Systems Senior Engineer
				Virginia Tech

--==_Exmh_-1139728314P Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) Comment: Exmh version 2.5 07/13/2001

iD8DBQE9lKlhcC3lWbTT17ARAn+xAKC0nsRCYvWyjawIUjt8tvuWZlV84wCgkKBg MhrNJKQVubqNIY1PaboGQe0= =RBHP -----END PGP SIGNATURE-----

--==_Exmh_-1139728314P-- - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/