Re: Linux Security *Module* Framework (Was: LSM conversion to static interface)

2007-10-24 Thread David P. Quigley
On Wed, 2007-10-24 at 14:58 -0700, Casey Schaufler wrote: > --- "David P. Quigley" <[EMAIL PROTECTED]> wrote: > > > On Wed, 2007-10-24 at 21:04 +0200, Jan Engelhardt wrote: > > > On Oct 24 2007 19:59, Simon Arlott wrote: > > > >On 24/10/07 19:51,

Re: Linux Security *Module* Framework (Was: LSM conversion to static interface)

2007-10-24 Thread David P. Quigley
On Wed, 2007-10-24 at 23:51 +0200, Jan Engelhardt wrote: > On Oct 24 2007 16:37, Serge E. Hallyn wrote: > > > >Or, a better example, a privileged program reads some sensitive data - > >as allowed by multiadm, writes it to a file, but apparmor prevented it > >from chowning the file to the right user

Re: Linux Security *Module* Framework (Was: LSM conversion to static interface)

2007-10-24 Thread David P. Quigley
On Wed, 2007-10-24 at 21:04 +0200, Jan Engelhardt wrote: > On Oct 24 2007 19:59, Simon Arlott wrote: > >On 24/10/07 19:51, Jan Engelhardt wrote: > >> On Oct 24 2007 19:11, Simon Arlott wrote: > >>> > >>>* (I've got a list of access rules which are scanned in order until one of > >>>them matches, a

Re: [TOMOYO 05/15](repost) Domain transition handler functions.

2007-10-03 Thread David P. Quigley
On Wed, 2007-10-03 at 23:19 +0900, Tetsuo Handa wrote: > Hello. > > Thank you for pointing out. > > Peter Zijlstra wrote: > > > Currently, TOMOYO Linux avoids read_lock, on the assumption that > > > (1) First, ptr->next is initialized with NULL. > > > (2) Later, ptr->next is assigned non-NULL add