linux-kernel - Re: Out of tree module using LSM

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20071130153712.GA7959@bleen.domain.actdsltmp>
Date:	Fri, 30 Nov 2007 08:37:12 -0700
From:	Justin Banks <justinb@...bone.com>
To:	Al Viro <viro@....linux.org.uk>
Cc:	Justin Banks <justinb@...bone.com>,
	Alan Cox <alan@...rguk.ukuu.org.uk>,
	Jon Masters <jonathan@...masters.org>,
	Ray Lee <ray-lk@...rabbit.org>, tvrtko.ursulin@...hos.com,
	Casey Schaufler <casey@...aufler-ca.com>,
	Christoph Hellwig <hch@...radead.org>,
	linux-kernel@...r.kernel.org, Valdis.Kletnieks@...edu
Subject: Re: Out of tree module using LSM

Al Viro wrote
> On Thu, Nov 29, 2007 at 03:12:38PM -0700, Justin Banks wrote:
> 
> > It's not perfect, but as was recently pointed out, if you can only get
> > 98% of the way there rather than 100% is that a reason for not trying to
> > make it possible?
> 
> BTW, that's a fine example of a common fallacy: "$FOO is 98% of the way to
> $TARGET" does not allow to interpolate the properties of $TARGET to those
> of $FOO.
> 
> Telling that a condom is a 98% approximation to platonic ideal of such is
> not particulary useful, especially if it turns out that what this number 
> really means is that there's a hole on its tip covering 2% of surface...

Understood, but for this use case (and indexing, probably replication,
IDS, and others) hooking at the "normal" VFS layer would provide enough
flexibility to do what's needed. I'm not saying it should be done, only
that it'd work, provide more use cases for linux, and not be totally
unsupportable.

-justinb

-- 
Justin Banks
BakBone Software
justinb@...bone.com
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/