Re: A basic question about the security_* hooks

[Samir Bellabes <sam@synack.fr>]

Evgeniy Polyakov <zbr@ioremap.net> writes:

> I believe you should convice selinux and friends to add support for your
> extension, otherwise no distribution will be able to turn it on, since
> no two security frameworks can be registered simultaneously.

I agree, as a LSM module, this purpose is a no sense, because it will
avoid using another security module.
On the other hand, adding this capacity directly to the syscalls seems
to be a little bit ugly (it reminds me security post_accept hook
strategy of returning or not a value). 

But the way to go is to add this directly to existing security models,
if it make sens for them.

sam