From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751438AbdE3KYD (ORCPT ); Tue, 30 May 2017 06:24:03 -0400 Received: from namei.org ([65.99.196.166]:52972 "EHLO namei.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751033AbdE3KYA (ORCPT ); Tue, 30 May 2017 06:24:00 -0400 Date: Tue, 30 May 2017 20:22:57 +1000 (AEST) From: James Morris To: Tetsuo Handa cc: keescook@chromium.org, linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org, kernel-hardening@lists.openwall.com, casey@schaufler-ca.com, hch@infradead.org, igor.stoppa@huawei.com, james.l.morris@oracle.com, paul@paul-moore.com, sds@tycho.nsa.gov Subject: Re: [PATCH] LSM: Convert security_hook_heads into explicit array of struct list_head In-Reply-To: <201705281026.EHD04622.HJFOLQFMSOtFOV@I-love.SAKURA.ne.jp> Message-ID: References: <1495883858-3336-1-git-send-email-penguin-kernel@I-love.SAKURA.ne.jp> <201705281026.EHD04622.HJFOLQFMSOtFOV@I-love.SAKURA.ne.jp> User-Agent: Alpine 2.20 (LRH 67 2015-01-07) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sun, 28 May 2017, Tetsuo Handa wrote: > can afford enabling". And we know that we cannot merge all security modules > into mainline. Thus, allowing LKM-based LSM modules is inevitable. Nope, it's not inevitable. The LSM API only caters to in-tree users. I'm not sure why you persist against this. -- James Morris From mboxrd@z Thu Jan 1 00:00:00 1970 From: jmorris@namei.org (James Morris) Date: Tue, 30 May 2017 20:22:57 +1000 (AEST) Subject: [PATCH] LSM: Convert security_hook_heads into explicit array of struct list_head In-Reply-To: <201705281026.EHD04622.HJFOLQFMSOtFOV@I-love.SAKURA.ne.jp> References: <1495883858-3336-1-git-send-email-penguin-kernel@I-love.SAKURA.ne.jp> <201705281026.EHD04622.HJFOLQFMSOtFOV@I-love.SAKURA.ne.jp> Message-ID: To: linux-security-module@vger.kernel.org List-Id: linux-security-module.vger.kernel.org On Sun, 28 May 2017, Tetsuo Handa wrote: > can afford enabling". And we know that we cannot merge all security modules > into mainline. Thus, allowing LKM-based LSM modules is inevitable. Nope, it's not inevitable. The LSM API only caters to in-tree users. I'm not sure why you persist against this. -- James Morris -- To unsubscribe from this list: send the line "unsubscribe linux-security-module" in the body of a message to majordomo at vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html From mboxrd@z Thu Jan 1 00:00:00 1970 Date: Tue, 30 May 2017 20:22:57 +1000 (AEST) From: James Morris In-Reply-To: <201705281026.EHD04622.HJFOLQFMSOtFOV@I-love.SAKURA.ne.jp> Message-ID: References: <1495883858-3336-1-git-send-email-penguin-kernel@I-love.SAKURA.ne.jp> <201705281026.EHD04622.HJFOLQFMSOtFOV@I-love.SAKURA.ne.jp> MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Subject: [kernel-hardening] Re: [PATCH] LSM: Convert security_hook_heads into explicit array of struct list_head To: Tetsuo Handa Cc: keescook@chromium.org, linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org, kernel-hardening@lists.openwall.com, casey@schaufler-ca.com, hch@infradead.org, igor.stoppa@huawei.com, james.l.morris@oracle.com, paul@paul-moore.com, sds@tycho.nsa.gov List-ID: On Sun, 28 May 2017, Tetsuo Handa wrote: > can afford enabling". And we know that we cannot merge all security modules > into mainline. Thus, allowing LKM-based LSM modules is inevitable. Nope, it's not inevitable. The LSM API only caters to in-tree users. I'm not sure why you persist against this. -- James Morris