[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <Line.LNX.4.64.0707190912520.4393@d.namei>
Date: Thu, 19 Jul 2007 09:19:56 -0400 (EDT)
From: James Morris <jmorris@...ei.org>
To: Jim Kovaric <jkovaric@...ibm.com>
cc: "Serge E. Hallyn" <serge@...lyn.com>,
Andrew Morton <akpm@...ux-foundation.org>,
Arjan van de Ven <arjan@...radead.org>,
Chris Wright <chrisw@...s-sol.org>,
linux-kernel@...r.kernel.org,
linux-security-module@...r.kernel.org,
Stephen Smalley <sds@...ho.nsa.gov>, serue@...ux.vnet.ibm.com
Subject: Re: [PATCH try #3] security: Convert LSM into a static interface
On Thu, 19 Jul 2007, James Morris wrote:
> On Thu, 19 Jul 2007, Jim Kovaric wrote:
>
> > IBMs TAMOS (Tivoli Access Manager for Operating systems) contains a
> > loadable module,
> > which is an "out of tree module", and registers "itself" as a security
> > module during the TAMOS startup
> > process. It also requires that SElinux be "disabled"
>
> Please provide a link to the source code, so we can understand how you're
> using the API.
I think I've found it:
ftp://ftp.software.ibm.com/software/tivoli_support/patches/patches_6.0.0/6.0.0-TIV-PDO-FP0007/6.0.0-TIV-PDO-Linux.i386-FP0007.tar
Is that correct?
kail_trap_syscalls()
seems to be revectoring the syscall table and siliently disabling any
active LSM.
kail_restore_syscalls()
attempts to restore them on module unload.
Is my understanding correct?
You're shipping this to customers as a security feature?
- James
--
James Morris
<jmorris@...ei.org>
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists