Re: [PATCH] remove sys_security

From: Stephen Smalley (sds@tislabs.com)
Date: Fri Oct 18 2002 - 12:44:18 EST


On Fri, 18 Oct 2002, Russell Coker wrote:

> The only code that we really want to see in the mainline kernel is the hooks
> for permission checks. Personally I would not mind if no security module
> ever gets included in Linus' source tree.

I'd disagree. I would like to see selinux included in the mainstream
kernel someday, but I know that selinux needs quite a bit of work
(Christoph says "rewrite") to make it acceptable. It also doesn't make
much sense to submit selinux until after the remainder of LSM has been
submitted for possible merging and after some level of pruning
and refinement of LSM has occurred. I would also expect other security
modules, e.g. DTE, to be submitted by their authors eventually. If there
aren't any in-tree users of LSM, then there is little motivation for the
kernel developers to retain LSM.

--
Stephen D. Smalley, NAI Labs
ssmalley@nai.com

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Wed Oct 23 2002 - 22:00:43 EST