Re: [PATCH v14 0/6] LSM: Multiple concurrent LSMs

2013-09-05 Thread Casey Schaufler
On 9/5/2013 11:48 AM, Kees Cook wrote: > On Mon, Aug 26, 2013 at 7:29 PM, Casey Schaufler > wrote: >> On 8/6/2013 3:36 PM, Kees Cook wrote: >>> On Tue, Aug 6, 2013 at 3:25 PM, Casey Schaufler >>> wrote: On 8/5/2013 11:30 PM, Kees Cook wrote: > On Thu, Jul 25, 2013 at 11:52 PM, Casey Sc

Re: [PATCH v14 0/6] LSM: Multiple concurrent LSMs

2013-09-05 Thread Kees Cook
On Mon, Aug 26, 2013 at 7:29 PM, Casey Schaufler wrote: > On 8/6/2013 3:36 PM, Kees Cook wrote: >> On Tue, Aug 6, 2013 at 3:25 PM, Casey Schaufler >> wrote: >>> On 8/5/2013 11:30 PM, Kees Cook wrote: On Thu, Jul 25, 2013 at 11:52 PM, Casey Schaufler wrote: > The /proc/*/attr inte

Re: [PATCH v14 0/6] LSM: Multiple concurrent LSMs

2013-08-28 Thread Kees Cook
On Mon, Aug 26, 2013 at 7:29 PM, Casey Schaufler wrote: > On 8/6/2013 3:36 PM, Kees Cook wrote: >> On Tue, Aug 6, 2013 at 3:25 PM, Casey Schaufler >> wrote: >>> On 8/5/2013 11:30 PM, Kees Cook wrote: On Thu, Jul 25, 2013 at 11:52 PM, Casey Schaufler wrote: > The /proc/*/attr inte

Re: [PATCH v14 0/6] LSM: Multiple concurrent LSMs

2013-08-26 Thread Casey Schaufler
On 8/6/2013 3:36 PM, Kees Cook wrote: > On Tue, Aug 6, 2013 at 3:25 PM, Casey Schaufler > wrote: >> On 8/5/2013 11:30 PM, Kees Cook wrote: >>> On Thu, Jul 25, 2013 at 11:52 PM, Casey Schaufler >>> wrote: The /proc/*/attr interfaces are given to one LSM. This can be done by setting CON

Re: [PATCH v14 0/6] LSM: Multiple concurrent LSMs

2013-08-06 Thread Kees Cook
On Tue, Aug 6, 2013 at 3:25 PM, Casey Schaufler wrote: > On 8/5/2013 11:30 PM, Kees Cook wrote: >> On Thu, Jul 25, 2013 at 11:52 PM, Casey Schaufler >> wrote: >>> The /proc/*/attr interfaces are given to one LSM. This can be >>> done by setting CONFIG_SECURITY_PRESENT. Additional interfaces >>>

Re: [PATCH v14 0/6] LSM: Multiple concurrent LSMs

2013-08-06 Thread Casey Schaufler
On 8/5/2013 11:30 PM, Kees Cook wrote: > On Thu, Jul 25, 2013 at 11:52 PM, Casey Schaufler > wrote: >> The /proc/*/attr interfaces are given to one LSM. This can be >> done by setting CONFIG_SECURITY_PRESENT. Additional interfaces >> have been created in /proc/*/attr so that each LSM has its own

Re: [PATCH v14 0/6] LSM: Multiple concurrent LSMs

2013-08-05 Thread Kees Cook
On Thu, Jul 25, 2013 at 11:52 PM, Casey Schaufler wrote: > The /proc/*/attr interfaces are given to one LSM. This can be > done by setting CONFIG_SECURITY_PRESENT. Additional interfaces > have been created in /proc/*/attr so that each LSM has its own > named interfaces. The name of the presenting

Re: [PATCH v14 0/6] LSM: Multiple concurrent LSMs

2013-08-05 Thread Balbir Singh
On Thu, Aug 1, 2013 at 10:51 PM, Casey Schaufler wrote: > On 7/31/2013 7:48 PM, Balbir Singh wrote: >> On Thu, Jul 25, 2013 at 11:52 PM, Casey Schaufler >> wrote: >>> Subject: [PATCH v14 0/6] LSM: Multiple concurrent LSMs >>> >>> Version 14 of this p

Re: [PATCH v14 0/6] LSM: Multiple concurrent LSMs

2013-08-01 Thread Casey Schaufler
On 7/31/2013 7:48 PM, Balbir Singh wrote: > On Thu, Jul 25, 2013 at 11:52 PM, Casey Schaufler > wrote: >> Subject: [PATCH v14 0/6] LSM: Multiple concurrent LSMs >> >> Version 14 of this patchset is based on v3.10. >> It required significant change from version 13

Re: [PATCH v14 0/6] LSM: Multiple concurrent LSMs

2013-07-31 Thread Balbir Singh
On Thu, Jul 25, 2013 at 11:52 PM, Casey Schaufler wrote: > Subject: [PATCH v14 0/6] LSM: Multiple concurrent LSMs > > Version 14 of this patchset is based on v3.10. > It required significant change from version 13 due to changes > in the audit code. It came out cleaner, especially

[PATCH v14 0/6] LSM: Multiple concurrent LSMs

2013-07-25 Thread Casey Schaufler
Subject: [PATCH v14 0/6] LSM: Multiple concurrent LSMs Version 14 of this patchset is based on v3.10. It required significant change from version 13 due to changes in the audit code. It came out cleaner, especially in the changes to NetLabel. This version supports all existing LSMs running