Re: [PATCH] make LSM register functions GPLonly exports

[Greg KH]

On Thu, Oct 17, 2002 at 10:08:19AM -0700, Linus Torvalds wrote:
> 
> Note that if this fight ends up being a major issue, I'm just going to 
> remove LSM and let the security vendors do their own thing. So far
> 
>  - I have not seen a lot of actual usage of the hooks

The SELinux module uses almost every hook so far.  A number of companies
and distros are currently auditing this module, and it will probably be
submitted for inclusion into the main kernel tree after they are
finished.

>  - seen a number of people who still worry that the hooks degrade 
>    performance in critical areas

I have a set of patches to send you today that will solve that problem,
by allowing people who do not want the hook to compile them away into
nothingness.  DaveM agrees with the proposed way of doing this.

>  - the worry that people use it for non-GPL'd modules is apparently real, 
>    considering Crispin's reply.

I agree with this, and argue to mark the functions as
EXPORT_SYMBOL_GPL() to make some people feel a bit more warm and fuzzy
that these hooks will not be co-oped for non-GPL use (this includes me.)

In short, I like Christoph's patch.

> I will re-iterate my stance on the GPL and kernel modules:

Thank you for posting this.  I know a lot of people appreciate it.

greg k-h