Re: Out of tree module using LSM

[Casey Schaufler <casey@schaufler-ca.com>]

--- Christoph Hellwig <hch@infradead.org> wrote:

> On Wed, Nov 28, 2007 at 12:42:52PM +0000, Tvrtko A. Ursulin wrote:
> > 
> > Hi Linus, all,
> > 
> > During one recent LKML discussion 
> > (http://marc.info/?l=linux-kernel&m=119267398722085&w=2) about LSM going 
> > static  you called for LSM users to speak up.
> > 
> > We here at Sophos (the fourth largest endpoint security vendor in the
> world) 
> > have such a module called Talpa which is a part of our main endpoint
> security 
> > product for Linux  that protects from viruses and malware hosted on Linux, 
> > including those targetting Windows or other connected devices,  
> >
>
(http://www.sophos.com/products/enterprise/endpoint/security-and-control/linux/index.html)
> 
> > which is GPL code and has been in the field for almost three years now.
> It's 
> > source code has been shipping with the product from the start.  We also
> have 
> > a SourceForge project at http://sourceforge.net/projects/talpa/ to host it.
> 
> Thanks for showing a wonderful source code example of why lsm shouldn't
> be exported :)

Would you like to expound on that, or do you feel your claws
are sharp enough already?


Casey Schaufler
casey@schaufler-ca.com