linux-kernel - Re: [PATCH v6 0/3] LSM: security module information improvements

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Fri, 28 Oct 2016 09:32:29 +1100 (AEDT)
From:   James Morris <jmorris@...ei.org>
To:     Casey Schaufler <casey@...aufler-ca.com>
cc:     LSM <linux-security-module@...r.kernel.org>,
        John Johansen <john.johansen@...onical.com>,
        Paul Moore <paul@...l-moore.com>,
        Kees Cook <keescook@...omium.org>,
        Stephen Smalley <sds@...ho.nsa.gov>,
        Tetsuo Handa <penguin-kernel@...ove.sakura.ne.jp>,
        LKLM <linux-kernel@...r.kernel.org>
Subject: Re: [PATCH v6 0/3] LSM: security module information improvements

On Wed, 26 Oct 2016, Casey Schaufler wrote:

> Create interfaces that make it possible to deal with process
> attributes in the face of multiple "major" security modules.

We don't have support for multiple major modules currently (perhaps ever), 
so I'm not merging infrastructure which is only useful for them.

> 
> Patch 1/3 adds /sys/kernel/security/lsm, which provides
> a list of the active security modules on the system.
> 
> 	$ cat /sys/kernel/security/lsm
> 	capability,yama,loadpin,smack

This may make sense on its own.  Has anyone requested this, or is likely 
to adopt it into a distro?


-- 
James Morris
<jmorris@...ei.org>