Re: [PATCH] /proc Security Hooks

2007-10-16 Thread Greg KH
On Wed, Oct 17, 2007 at 07:13:57AM +0200, Max Kellermann wrote: > On 2007/10/16 21:54, Arjan van de Ven <[EMAIL PROTECTED]> wrote: > > On Tue, 16 Oct 2007 21:38:50 +0200 > > Max Kellermann <[EMAIL PROTECTED]> wrote: > > > This patch attempts to unify duplicated code found in modules like > > > Linu

Re: [PATCH] /proc Security Hooks

2007-10-16 Thread Arjan van de Ven
On Wed, 17 Oct 2007 07:13:57 +0200 Max Kellermann <[EMAIL PROTECTED]> wrote: > On 2007/10/16 21:54, Arjan van de Ven <[EMAIL PROTECTED]> wrote: > > On Tue, 16 Oct 2007 21:38:50 +0200 > > Max Kellermann <[EMAIL PROTECTED]> wrote: > > > This patch attempts to unify duplicated code found in modules l

Re: [PATCH] /proc Security Hooks

2007-10-16 Thread Max Kellermann
On 2007/10/16 21:54, Arjan van de Ven <[EMAIL PROTECTED]> wrote: > On Tue, 16 Oct 2007 21:38:50 +0200 > Max Kellermann <[EMAIL PROTECTED]> wrote: > > This patch attempts to unify duplicated code found in modules like > > Linux VServer. > > can you please merge this patch only when you also merge t

Re: [RFC] [PATCH 2/2] capabilities: implement 64-bit capabilities

2007-10-16 Thread Serge E. Hallyn
Quoting Stephen Smalley ([EMAIL PROTECTED]): > On Mon, 2007-10-15 at 21:31 -0500, Serge E. Hallyn wrote: > > >From 7dd503c612afcb86b3165602ab264e2e9493b4bf Mon Sep 17 00:00:00 2001 > > From: Serge E. Hallyn <[EMAIL PROTECTED]> > > Date: Mon, 15 Oct 2007 20:57:52 -0400 > > Subject: [RFC] [PATCH 2/2]

Re: [PATCH] /proc Security Hooks

2007-10-16 Thread Serge E. Hallyn
Quoting Max Kellermann ([EMAIL PROTECTED]): > Add two LSM hooks for limiting access to the proc file system. > > security_proc_task() defines the visibility of tasks in /proc. > > security_proc_generic() lets the LSM define who will see "generic" > proc entries (see fs/proc/generic.c). > > This

Re: [PATCH] /proc Security Hooks

2007-10-16 Thread Arjan van de Ven
On Tue, 16 Oct 2007 21:38:50 +0200 Max Kellermann <[EMAIL PROTECTED]> wrote: > Add two LSM hooks for limiting access to the proc file system. > > security_proc_task() defines the visibility of tasks in /proc. > > security_proc_generic() lets the LSM define who will see "generic" > proc entries (

[PATCH] /proc Security Hooks

2007-10-16 Thread Max Kellermann
Add two LSM hooks for limiting access to the proc file system. security_proc_task() defines the visibility of tasks in /proc. security_proc_generic() lets the LSM define who will see "generic" proc entries (see fs/proc/generic.c). This patch attempts to unify duplicated code found in modules lik

Re: [RFC] [PATCH 2/2] capabilities: implement 64-bit capabilities

2007-10-16 Thread Serge E. Hallyn
Quoting Stephen Smalley ([EMAIL PROTECTED]): > On Mon, 2007-10-15 at 21:31 -0500, Serge E. Hallyn wrote: > > >From 7dd503c612afcb86b3165602ab264e2e9493b4bf Mon Sep 17 00:00:00 2001 > > From: Serge E. Hallyn <[EMAIL PROTECTED]> > > Date: Mon, 15 Oct 2007 20:57:52 -0400 > > Subject: [RFC] [PATCH 2/2]

Re: [RFC] [PATCH 2/2] capabilities: implement 64-bit capabilities

2007-10-16 Thread Stephen Smalley
On Mon, 2007-10-15 at 21:31 -0500, Serge E. Hallyn wrote: > >From 7dd503c612afcb86b3165602ab264e2e9493b4bf Mon Sep 17 00:00:00 2001 > From: Serge E. Hallyn <[EMAIL PROTECTED]> > Date: Mon, 15 Oct 2007 20:57:52 -0400 > Subject: [RFC] [PATCH 2/2] capabilities: implement 64-bit capabilities > > We ar