Re: [PATCH] [request for inclusion] Realtime LSM

Chris Wright
2005-01-05T03:46:01Z

* Kyle Moffett (mrmacman_g4@mac.com) wrote:
> Here's a relatively simple idea: Why not make the "Realtime LSM"
> just check for a certain "Realtime" credential in the new credential
> store (Patch is in 2.6.10, see [1] for control program). You would
> mark it as a system credential and give access to that credential via
> the appropriate capability with a small utility program.

Well, that's basically what the gid is in this case. It's the credential
that's set at login time and has all the proper sharing and inheritance
rules. So, I'm not yet convinced that this would buy us much.

thanks,
-chris
--
Linux Security Modules http://lsm.immunix.org http://lsm.bkbits.net