Re: [PATCH 09/14] CacheFiles: Permit a process's create SID to be overridden [try #2]

From: David Howells
Date: Thu Aug 09 2007 - 14:08:58 EST


Casey Schaufler <casey@xxxxxxxxxxxxxxxx> wrote:

> This is SELinux specific funtionality and should be done in the
> SELinux code. You should not be adding interfaces that are SELinux
> specific, in this case using secids instead of the LSM blob interfaces.

Is using secids your only objection? Or are you objecting to the whole
'act-as' concept?

David
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/