Re: Out of tree module using LSM

From: Casey Schaufler
Date: Wed Nov 28 2007 - 11:38:54 EST



--- Christoph Hellwig <hch@xxxxxxxxxxxxx> wrote:

> On Wed, Nov 28, 2007 at 12:42:52PM +0000, Tvrtko A. Ursulin wrote:
> >
> > Hi Linus, all,
> >
> > During one recent LKML discussion
> > (http://marc.info/?l=linux-kernel&m=119267398722085&w=2) about LSM going
> > static you called for LSM users to speak up.
> >
> > We here at Sophos (the fourth largest endpoint security vendor in the
> world)
> > have such a module called Talpa which is a part of our main endpoint
> security
> > product for Linux that protects from viruses and malware hosted on Linux,
> > including those targetting Windows or other connected devices,
> >
>
(http://www.sophos.com/products/enterprise/endpoint/security-and-control/linux/index.html)
>
> > which is GPL code and has been in the field for almost three years now.
> It's
> > source code has been shipping with the product from the start. We also
> have
> > a SourceForge project at http://sourceforge.net/projects/talpa/ to host it.
>
> Thanks for showing a wonderful source code example of why lsm shouldn't
> be exported :)

Would you like to expound on that, or do you feel your claws
are sharp enough already?


Casey Schaufler
casey@xxxxxxxxxxxxxxxx
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/