Re: [PATCH] remove sys_security

David S. Miller
2002-10-17T22:53:35Z

From: Andreas Steinmetz <ast@domdv.de>
Date: Fri, 18 Oct 2002 00:51:29 +0200

For the next few years 99% of the linux users won't use GBit ethernet,
so why don't you remove these drivers from the kernel?

The vast majority of desktop computers today ship with gigabit
ethernet interfaces on the motherboard.

So you are wrong, people use it today.

As per the rest of your email, most of my disagreement has to do
with the fact that the implementation isn't optimal. Going back
to USB, it's optimal because it falls into one of two possible
categories:

1) If I don't use it, and it's built as a module, it takes up
no resources on my computer.

2) The facilities added to support feature X also helps make
things like Y and Z possible.

Things like #2 are the things Al Viro is talking about.

So instead of "security_ops()->this, security_ops()->that" being
sprinkled merrily all over the VFS, we have something useful to things
outside of LSM such as full file */fd attributes.

Frankly, as a side effect of no effort being put into #2, the LSM user
level interface is complete shit. As is the hook mechanism.