Re: [patch 1/3] lsm: add bsdjail module

Andrew Morton
2004-10-07T06:24:08Z

James Morris <jmorris@redhat.com> wrote:
>
> On Thu, 7 Oct 2004, Serge E. Hallyn wrote:
>
> > Because it gives Linux a functionality like FreeBSD's jail and Solaris'
> > zones in an unobtrusive manner, without impacting users who don't wish
> > to use it (except for the extra security_task_lookup function calls).
>
> Yes, as an LSM module, it can be configured out. I think it's a good use
> of the LSM framework, and may be useful for people migrating to Linux from
> legacy Solaris and FreeBSD.

Sure, but that's a bit speculative for adding a feature to the mainline
kernel.

Is there vendor pull for this feature? Do IBM have customers requiring it?

"someone might like this" is not a sufficient basis for adding stuff to the
kernel, sorry.