Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Kernel

From: Paul Moore
Date: Sun Sep 30 2007 - 16:31:19 EST


On Sunday 30 September 2007 4:16:18 am Andrew Morton wrote:
> - hm, netlabels. Who might be a suitable person to review that code?
> Seems that Paul Moore is the man. Maybe he'd be interested in taking a
> look over it (please?)

Yep, I've been tracking Casey's work on this since the first patch and sending
comments when appropriate. I'm going to take a look at the latest rev of the
patch and if anything looks awry I'll be sure to let Casey know.

The only real wart that still remains from the original patch is the code in
smk_cipso_doi() which has a nice comment at the top saying that Paul and
Casey need to work out an appropriate interface between NetLabel and SMACK.
We punted on it before because SMACK's future was still a bit uncertain and
SELinux has no need for an interface like this at present. Now that SMACK
looks to be queued up for 2.6.24 it's time to revisit this discussion.

--
paul moore
linux security @ hp
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/