Re: [2.6 patch] kernel/audit.c: change the exports to EXPORT_SYMBOL_GPL
On Mon, Jul 30, 2007 at 09:18:41AM -0400, Steve Grubb wrote: > On Sunday 29 July 2007 11:02:33 Adrian Bunk wrote: > > They are still completely unused, but hopefully some of the theoretical > > code that might use it will appear in the kernel in the near future... > > > > Signed-off-by: Adrian Bunk <[EMAIL PROTECTED]> > > Acked-by: Steve Grubb <[EMAIL PROTECTED]> > > I am reluctant to say that I ack this patch for a couple reasons: > > 1) We are talking about a basic logging facility that should be open like > printk() is. > > 2) There are no user space GPL restrictions to use the audit netlink API, so > why restrict who can send audit events via the in-kernel interfaces? It just > doesn't make sense to have 2 different licenses for in-kernel vs user space > audit event recording. Its the same subsystem differing only by where the > event originated. It's a well-known fact that there are legal differences between calling kernel services from userspace and kernel modules. > 3) The API has been unrestricted for years. I don't think its a good idea to > take a basic logging API away from people that have programmed to it. If it's such a basic API, why isn't there a single user in the kernel? > 4) In the absence of the in-kernel audit logging api, people will either > create parallel infrastructure or resort to using printk. It will be > difficult for end users to correlate security events from 2 different logs. > > I would support there being a mechanism for anyone who wants to reduce the > number of exported symbols for their own kernels - I believe that is the > basic problem here. But I think there are enough reasons to continue keeping > this API open and unrestricted for anyone that wants it that way. The Linux kernel does not offer a stable kernel API for external modules. That's a well-known fact. > -Steve cu Adrian -- "Is there not promise of rain?" Ling Tan asked suddenly out of the darkness. There had been need of rain for many days. "Only a promise," Lao Er said. Pearl S. Buck - Dragon Seed - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: [2.6 patch] kernel/audit.c: change the exports to EXPORT_SYMBOL_GPL
On Sunday 29 July 2007 11:02:33 Adrian Bunk wrote: > They are still completely unused, but hopefully some of the theoretical > code that might use it will appear in the kernel in the near future... > > Signed-off-by: Adrian Bunk <[EMAIL PROTECTED]> > Acked-by: Steve Grubb <[EMAIL PROTECTED]> I am reluctant to say that I ack this patch for a couple reasons: 1) We are talking about a basic logging facility that should be open like printk() is. 2) There are no user space GPL restrictions to use the audit netlink API, so why restrict who can send audit events via the in-kernel interfaces? It just doesn't make sense to have 2 different licenses for in-kernel vs user space audit event recording. Its the same subsystem differing only by where the event originated. 3) The API has been unrestricted for years. I don't think its a good idea to take a basic logging API away from people that have programmed to it. 4) In the absence of the in-kernel audit logging api, people will either create parallel infrastructure or resort to using printk. It will be difficult for end users to correlate security events from 2 different logs. I would support there being a mechanism for anyone who wants to reduce the number of exported symbols for their own kernels - I believe that is the basic problem here. But I think there are enough reasons to continue keeping this API open and unrestricted for anyone that wants it that way. -Steve - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: [2.6 patch] kernel/audit.c: change the exports to EXPORT_SYMBOL_GPL
On Sunday 29 July 2007 11:02:33 Adrian Bunk wrote: They are still completely unused, but hopefully some of the theoretical code that might use it will appear in the kernel in the near future... Signed-off-by: Adrian Bunk [EMAIL PROTECTED] Acked-by: Steve Grubb [EMAIL PROTECTED] I am reluctant to say that I ack this patch for a couple reasons: 1) We are talking about a basic logging facility that should be open like printk() is. 2) There are no user space GPL restrictions to use the audit netlink API, so why restrict who can send audit events via the in-kernel interfaces? It just doesn't make sense to have 2 different licenses for in-kernel vs user space audit event recording. Its the same subsystem differing only by where the event originated. 3) The API has been unrestricted for years. I don't think its a good idea to take a basic logging API away from people that have programmed to it. 4) In the absence of the in-kernel audit logging api, people will either create parallel infrastructure or resort to using printk. It will be difficult for end users to correlate security events from 2 different logs. I would support there being a mechanism for anyone who wants to reduce the number of exported symbols for their own kernels - I believe that is the basic problem here. But I think there are enough reasons to continue keeping this API open and unrestricted for anyone that wants it that way. -Steve - To unsubscribe from this list: send the line unsubscribe linux-kernel in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: [2.6 patch] kernel/audit.c: change the exports to EXPORT_SYMBOL_GPL
On Mon, Jul 30, 2007 at 09:18:41AM -0400, Steve Grubb wrote: On Sunday 29 July 2007 11:02:33 Adrian Bunk wrote: They are still completely unused, but hopefully some of the theoretical code that might use it will appear in the kernel in the near future... Signed-off-by: Adrian Bunk [EMAIL PROTECTED] Acked-by: Steve Grubb [EMAIL PROTECTED] I am reluctant to say that I ack this patch for a couple reasons: 1) We are talking about a basic logging facility that should be open like printk() is. 2) There are no user space GPL restrictions to use the audit netlink API, so why restrict who can send audit events via the in-kernel interfaces? It just doesn't make sense to have 2 different licenses for in-kernel vs user space audit event recording. Its the same subsystem differing only by where the event originated. It's a well-known fact that there are legal differences between calling kernel services from userspace and kernel modules. 3) The API has been unrestricted for years. I don't think its a good idea to take a basic logging API away from people that have programmed to it. If it's such a basic API, why isn't there a single user in the kernel? 4) In the absence of the in-kernel audit logging api, people will either create parallel infrastructure or resort to using printk. It will be difficult for end users to correlate security events from 2 different logs. I would support there being a mechanism for anyone who wants to reduce the number of exported symbols for their own kernels - I believe that is the basic problem here. But I think there are enough reasons to continue keeping this API open and unrestricted for anyone that wants it that way. The Linux kernel does not offer a stable kernel API for external modules. That's a well-known fact. -Steve cu Adrian -- Is there not promise of rain? Ling Tan asked suddenly out of the darkness. There had been need of rain for many days. Only a promise, Lao Er said. Pearl S. Buck - Dragon Seed - To unsubscribe from this list: send the line unsubscribe linux-kernel in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: [2.6 patch] kernel/audit.c: change the exports to EXPORT_SYMBOL_GPL
On Sun, Jul 29, 2007 at 05:02:33PM +0200, Adrian Bunk wrote: > This patch changes some completely unused audit exports from > EXPORT_SYMBOL to EXPORT_SYMBOL_GPL. > > They are still completely unused, but hopefully some of the theoretical > code that might use it will appear in the kernel in the near future... Please kill them. We can add exports back once people add users for them. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: [2.6 patch] kernel/audit.c: change the exports to EXPORT_SYMBOL_GPL
On Sun, 2007-07-29 at 21:33 +0200, Marcus Meissner wrote: > On Sun, Jul 29, 2007 at 11:40:33AM -0700, Arjan van de Ven wrote: > > On Sun, 2007-07-29 at 17:02 +0200, Adrian Bunk wrote: > > > This patch changes some completely unused audit exports from > > > EXPORT_SYMBOL to EXPORT_SYMBOL_GPL. > > > > > > They are still completely unused, but hopefully some of the theoretical > > > code that might use it will appear in the kernel in the near future... > > AppArmor uses the audit_log_* functions. but it's not in the tree. So marking them _UNUSED_ in the tree is still appropriate. They're there for the people who want them, they're not there for those who want to save the space -- if you want to mail me at work (you don't), use arjan (at) linux.intel.com Test the interaction between Linux and your BIOS via http://www.linuxfirmwarekit.org - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: [2.6 patch] kernel/audit.c: change the exports to EXPORT_SYMBOL_GPL
On Sun, Jul 29, 2007 at 11:40:33AM -0700, Arjan van de Ven wrote: > On Sun, 2007-07-29 at 17:02 +0200, Adrian Bunk wrote: > > This patch changes some completely unused audit exports from > > EXPORT_SYMBOL to EXPORT_SYMBOL_GPL. > > > > They are still completely unused, but hopefully some of the theoretical > > code that might use it will appear in the kernel in the near future... AppArmor uses the audit_log_* functions. (But it is GPL, so no worries). Ciao, Marcus - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: [2.6 patch] kernel/audit.c: change the exports to EXPORT_SYMBOL_GPL
On Sun, 2007-07-29 at 17:02 +0200, Adrian Bunk wrote: > This patch changes some completely unused audit exports from > EXPORT_SYMBOL to EXPORT_SYMBOL_GPL. > > They are still completely unused, but hopefully some of the theoretical > code that might use it will appear in the kernel in the near future... \ at least make them _UNUSED_ so that people can select to not have these take up space... - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: [2.6 patch] kernel/audit.c: change the exports to EXPORT_SYMBOL_GPL
On Sun, 2007-07-29 at 17:02 +0200, Adrian Bunk wrote: This patch changes some completely unused audit exports from EXPORT_SYMBOL to EXPORT_SYMBOL_GPL. They are still completely unused, but hopefully some of the theoretical code that might use it will appear in the kernel in the near future... \ at least make them _UNUSED_ so that people can select to not have these take up space... - To unsubscribe from this list: send the line unsubscribe linux-kernel in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: [2.6 patch] kernel/audit.c: change the exports to EXPORT_SYMBOL_GPL
On Sun, Jul 29, 2007 at 11:40:33AM -0700, Arjan van de Ven wrote: On Sun, 2007-07-29 at 17:02 +0200, Adrian Bunk wrote: This patch changes some completely unused audit exports from EXPORT_SYMBOL to EXPORT_SYMBOL_GPL. They are still completely unused, but hopefully some of the theoretical code that might use it will appear in the kernel in the near future... AppArmor uses the audit_log_* functions. (But it is GPL, so no worries). Ciao, Marcus - To unsubscribe from this list: send the line unsubscribe linux-kernel in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: [2.6 patch] kernel/audit.c: change the exports to EXPORT_SYMBOL_GPL
On Sun, 2007-07-29 at 21:33 +0200, Marcus Meissner wrote: On Sun, Jul 29, 2007 at 11:40:33AM -0700, Arjan van de Ven wrote: On Sun, 2007-07-29 at 17:02 +0200, Adrian Bunk wrote: This patch changes some completely unused audit exports from EXPORT_SYMBOL to EXPORT_SYMBOL_GPL. They are still completely unused, but hopefully some of the theoretical code that might use it will appear in the kernel in the near future... AppArmor uses the audit_log_* functions. but it's not in the tree. So marking them _UNUSED_ in the tree is still appropriate. They're there for the people who want them, they're not there for those who want to save the space -- if you want to mail me at work (you don't), use arjan (at) linux.intel.com Test the interaction between Linux and your BIOS via http://www.linuxfirmwarekit.org - To unsubscribe from this list: send the line unsubscribe linux-kernel in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: [2.6 patch] kernel/audit.c: change the exports to EXPORT_SYMBOL_GPL
On Sun, Jul 29, 2007 at 05:02:33PM +0200, Adrian Bunk wrote: This patch changes some completely unused audit exports from EXPORT_SYMBOL to EXPORT_SYMBOL_GPL. They are still completely unused, but hopefully some of the theoretical code that might use it will appear in the kernel in the near future... Please kill them. We can add exports back once people add users for them. - To unsubscribe from this list: send the line unsubscribe linux-kernel in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
