Re: [PATCH 2/4] integrity: Linux Integrity Module(LIM)

david safford
2008-11-20T19:22:45Z

On Thu, 2008-11-20 at 12:45 -0500, Christoph Hellwig wrote:
> Ok, the API looks sane to me. But one big question: any reason you
> don't just directly call into your implementation instead of all these
> odd hooks? This seems to be a lot of overhead just for making the code
> less readable..
>

The consensus in the (insane) security community was to have an
interface with selectable modules similar to LSM and its modules,
so that users could easily choose among a set of integrity providers.

dave