Re: [PATCH] remove sys_security

Chris Wright
2002-10-17T23:13:54Z

* Greg KH (greg@kroah.com) wrote:
> On Thu, Oct 17, 2002 at 03:56:30PM -0700, David S. Miller wrote:
> >
> > I'm now leaning more towards something like what Al Viro
> > hinted at earlier, creating generic per-file/fd attributes.
> > This kind of stuff.
>
> I think either Al, or Chris Wright, have mentioned that stackable
> filesystems would remove all of the LSM VFS hooks, and also enable a lot
> of other cool things to happen. Unfortunately, that's not going to make
> it into 2.6, but in the future is probably the way to go.

I think it's more like filters than true stacking. If I understand the
problem correctly, true generic stacking introduces cache coherency fun.

thanks,
-chris
--
Linux Security Modules http://lsm.immunix.org http://lsm.bkbits.net