Re: [PATCH] /proc Security Hooks

2007-10-17 Thread Greg KH
On Wed, Oct 17, 2007 at 07:13:57AM +0200, Max Kellermann wrote: > On 2007/10/16 21:54, Arjan van de Ven <[EMAIL PROTECTED]> wrote: > > On Tue, 16 Oct 2007 21:38:50 +0200 > > Max Kellermann <[EMAIL PROTECTED]> wrote: > > > This patch attempts to unify duplicated code found in modules like > > >

Re: [PATCH] /proc Security Hooks

2007-10-17 Thread Greg KH
On Wed, Oct 17, 2007 at 07:13:57AM +0200, Max Kellermann wrote: On 2007/10/16 21:54, Arjan van de Ven [EMAIL PROTECTED] wrote: On Tue, 16 Oct 2007 21:38:50 +0200 Max Kellermann [EMAIL PROTECTED] wrote: This patch attempts to unify duplicated code found in modules like Linux VServer.

Re: [PATCH] /proc Security Hooks

2007-10-16 Thread Arjan van de Ven
On Wed, 17 Oct 2007 07:13:57 +0200 Max Kellermann <[EMAIL PROTECTED]> wrote: > On 2007/10/16 21:54, Arjan van de Ven <[EMAIL PROTECTED]> wrote: > > On Tue, 16 Oct 2007 21:38:50 +0200 > > Max Kellermann <[EMAIL PROTECTED]> wrote: > > > This patch attempts to unify duplicated code found in modules

Re: [PATCH] /proc Security Hooks

2007-10-16 Thread Max Kellermann
On 2007/10/16 21:54, Arjan van de Ven <[EMAIL PROTECTED]> wrote: > On Tue, 16 Oct 2007 21:38:50 +0200 > Max Kellermann <[EMAIL PROTECTED]> wrote: > > This patch attempts to unify duplicated code found in modules like > > Linux VServer. > > can you please merge this patch only when you also merge

Re: [PATCH] /proc Security Hooks

2007-10-16 Thread Serge E. Hallyn
Quoting Max Kellermann ([EMAIL PROTECTED]): > Add two LSM hooks for limiting access to the proc file system. > > security_proc_task() defines the visibility of tasks in /proc. > > security_proc_generic() lets the LSM define who will see "generic" > proc entries (see fs/proc/generic.c). > > This

Re: [PATCH] /proc Security Hooks

2007-10-16 Thread Arjan van de Ven
On Tue, 16 Oct 2007 21:38:50 +0200 Max Kellermann <[EMAIL PROTECTED]> wrote: > Add two LSM hooks for limiting access to the proc file system. > > security_proc_task() defines the visibility of tasks in /proc. > > security_proc_generic() lets the LSM define who will see "generic" > proc entries

[PATCH] /proc Security Hooks

2007-10-16 Thread Max Kellermann
Add two LSM hooks for limiting access to the proc file system. security_proc_task() defines the visibility of tasks in /proc. security_proc_generic() lets the LSM define who will see "generic" proc entries (see fs/proc/generic.c). This patch attempts to unify duplicated code found in modules

[PATCH] /proc Security Hooks

2007-10-16 Thread Max Kellermann
Add two LSM hooks for limiting access to the proc file system. security_proc_task() defines the visibility of tasks in /proc. security_proc_generic() lets the LSM define who will see generic proc entries (see fs/proc/generic.c). This patch attempts to unify duplicated code found in modules like

Re: [PATCH] /proc Security Hooks

2007-10-16 Thread Arjan van de Ven
On Tue, 16 Oct 2007 21:38:50 +0200 Max Kellermann [EMAIL PROTECTED] wrote: Add two LSM hooks for limiting access to the proc file system. security_proc_task() defines the visibility of tasks in /proc. security_proc_generic() lets the LSM define who will see generic proc entries (see

Re: [PATCH] /proc Security Hooks

2007-10-16 Thread Serge E. Hallyn
Quoting Max Kellermann ([EMAIL PROTECTED]): Add two LSM hooks for limiting access to the proc file system. security_proc_task() defines the visibility of tasks in /proc. security_proc_generic() lets the LSM define who will see generic proc entries (see fs/proc/generic.c). This patch

Re: [PATCH] /proc Security Hooks

2007-10-16 Thread Max Kellermann
On 2007/10/16 21:54, Arjan van de Ven [EMAIL PROTECTED] wrote: On Tue, 16 Oct 2007 21:38:50 +0200 Max Kellermann [EMAIL PROTECTED] wrote: This patch attempts to unify duplicated code found in modules like Linux VServer. can you please merge this patch only when you also merge the first

Re: [PATCH] /proc Security Hooks

2007-10-16 Thread Arjan van de Ven
On Wed, 17 Oct 2007 07:13:57 +0200 Max Kellermann [EMAIL PROTECTED] wrote: On 2007/10/16 21:54, Arjan van de Ven [EMAIL PROTECTED] wrote: On Tue, 16 Oct 2007 21:38:50 +0200 Max Kellermann [EMAIL PROTECTED] wrote: This patch attempts to unify duplicated code found in modules like Linux