Re: Time to remove LSM (was Re: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks)

Valdis.Kletnieks
2006-04-19T17:06:54Z

[-- Attachment #1: Type: text/plain, Size: 512 bytes --]

On Wed, 19 Apr 2006 10:16:46 +0200, Jan Engelhardt said:

> >So, I think the only way to be able to realisticly keep the LSM
> >interface, is for a valid, working, maintained LSM-based security model
> >to go into the kernel tree. So far, I haven't seen any public posting
> >of patches that meet this requirement :(
>
> In that case, maybe it would be worthwhile to flip the positions, i.e. LSM on
> top of SELinux, sort of a compat layer.

How would that *possibly* work? What semantics would *that* have?

[-- Attachment #2: Type: application/pgp-signature, Size: 226 bytes --]