linux-kernel - Re: Out of tree module using LSM

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Wed, 28 Nov 2007 08:38:43 -0800 (PST)
From:	Casey Schaufler <casey@...aufler-ca.com>
To:	Christoph Hellwig <hch@...radead.org>,
	"Tvrtko A. Ursulin" <tvrtko.ursulin@...hos.com>
Cc:	linux-kernel@...r.kernel.org
Subject: Re: Out of tree module using LSM


--- Christoph Hellwig <hch@...radead.org> wrote:

> On Wed, Nov 28, 2007 at 12:42:52PM +0000, Tvrtko A. Ursulin wrote:
> > 
> > Hi Linus, all,
> > 
> > During one recent LKML discussion 
> > (http://marc.info/?l=linux-kernel&m=119267398722085&w=2) about LSM going 
> > static  you called for LSM users to speak up.
> > 
> > We here at Sophos (the fourth largest endpoint security vendor in the
> world) 
> > have such a module called Talpa which is a part of our main endpoint
> security 
> > product for Linux  that protects from viruses and malware hosted on Linux, 
> > including those targetting Windows or other connected devices,  
> >
>
(http://www.sophos.com/products/enterprise/endpoint/security-and-control/linux/index.html)
> 
> > which is GPL code and has been in the field for almost three years now.
> It's 
> > source code has been shipping with the product from the start.  We also
> have 
> > a SourceForge project at http://sourceforge.net/projects/talpa/ to host it.
> 
> Thanks for showing a wonderful source code example of why lsm shouldn't
> be exported :)

Would you like to expound on that, or do you feel your claws
are sharp enough already?


Casey Schaufler
casey@...aufler-ca.com
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/