Module_request permission for individual kernel module

[Dinesh Garg]

Hi All,
One can have a rule as following to allow one process to load a kernel
module.

allow PROCESS1 kernel:system module_request;

but this allows PROCESS1 to load any kernel module and hence a security
risk.

Can we have a specific rule that PROCESS one can load only particular
module?

Thanks,
Dinesh

_______________________________________________
Seandroid-list mailing list
Seandroid-list@tycho.nsa.gov
To unsubscribe, send email to seandroid-list-le...@tycho.nsa.gov.
To get help, send an email containing "help" to 
seandroid-list-requ...@tycho.nsa.gov.