Re: [PATCH try #3] security: Convert LSM into a static interface

Arjan van de Ven
2007-07-18T16:23:23Z

On Sat, 2007-07-14 at 12:37 -0400, James Morris wrote:
> Convert LSM into a static interface, as the ability to unload a security
> module is not required by in-tree users and potentially complicates the
> overall security architecture.
>
> Needlessly exported LSM symbols have been unexported, to help reduce API
> abuse.
>
> Parameters for the capability and root_plug modules are now specified
> at boot.
>
> The SECURITY_FRAMEWORK_VERSION macro has also been removed.
>
> Signed-off-by: James Morris <jmorris@namei.org>

This is a good cleanup since modular LSM modules just aren't working,
and prepares for the option of removing the runtime overhead of LSM
altogether for selected configs... that is going to be a big step
forward to make SELinux and any other model be more acceptable for
people who care about performance.

Acked-by: Arjan van de Ven <arjan@linux.intel.com>