Re: LSM: memory and user-space interaction

2007-08-07 Thread Cliffe
Stephen Smalley wrote: On Tue, 2007-08-07 at 16:11 +0800, Cliffe wrote: ... Don't confuse kernel stack limitation with the ability to dynamically allocate memory in the kernel. How large is your policy? I'm guessing that SELinux reference policy is larger, e.g. from /proc/slabinfo: #

Re: LSM: memory and user-space interaction

2007-08-07 Thread Stephen Smalley
On Tue, 2007-08-07 at 16:11 +0800, Cliffe wrote: > G’day, > > I would really appreciate some advice. > > I realise the kernel has a small stack, and I imagine this will have a > greater impact on my LSM design than I originally thought. I would > really appreciate some input. > > My LSM has a

LSM: memory and user-space interaction

2007-08-07 Thread Cliffe
G’day, I would really appreciate some advice. I realise the kernel has a small stack, and I imagine this will have a greater impact on my LSM design than I originally thought. I would really appreciate some input. My LSM has a hierarchical policy structure which is made up of a (relatively)