Re: [PATCH 2/3] SELinux: add security_task_setmempolicy hooks to mmcode

From: Christoph Lameter
Date: Wed Jun 21 2006 - 15:33:15 EST


On Wed, 21 Jun 2006, James Morris wrote:

> From: David Quigley <dpquigl@xxxxxxxxxxxxx>
>
> This patch inserts the security hook calls into the setmempolicy function
> to enable security modules to mediate this operation between tasks.

Setting a memory policy is different from migrating pages of an
application. The migration function migrates a process, it does not set
any memory policies. Cpuset may change memory policies of the tasks
contained in it but sys_migrate_pages() cannot.

We need a similar hook for the sys_move_pages() function call in mm right?

If this is a generic hook then I would suggest to have some hook that
contains the term "memory placement" somewhere that would fit both system
calls.


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/