From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1750973AbWDTPCQ (ORCPT ); Thu, 20 Apr 2006 11:02:16 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1750968AbWDTPCQ (ORCPT ); Thu, 20 Apr 2006 11:02:16 -0400 Received: from mx2.suse.de ([195.135.220.15]:25034 "EHLO mx2.suse.de") by vger.kernel.org with ESMTP id S1750964AbWDTPCP (ORCPT ); Thu, 20 Apr 2006 11:02:15 -0400 Date: Thu, 20 Apr 2006 08:00:37 -0700 From: Greg KH To: Stephen Smalley , tonyj@suse.de Cc: James Morris , Jan Engelhardt , Christoph Hellwig , Andrew Morton , T?r?k Edwin , linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org, Chris Wright , Linus Torvalds Subject: Removing EXPORT_SYMBOL(security_ops) (was Re: Time to remove LSM) Message-ID: <20060420150037.GA30353@kroah.com> References: <20060417162345.GA9609@infradead.org> <1145293404.8542.190.camel@moss-spartans.epoch.ncsc.mil> <20060417173319.GA11506@infradead.org> <20060417195146.GA8875@kroah.com> <20060419154011.GA26635@kroah.com> <20060419181015.GC11091@kroah.com> <1145536791.16456.37.camel@moss-spartans.epoch.ncsc.mil> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1145536791.16456.37.camel@moss-spartans.epoch.ncsc.mil> User-Agent: Mutt/1.5.11 Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org On Thu, Apr 20, 2006 at 08:39:51AM -0400, Stephen Smalley wrote: > On Wed, 2006-04-19 at 11:10 -0700, Greg KH wrote: > > On Wed, Apr 19, 2006 at 12:33:24PM -0400, James Morris wrote: > > > The LSM interface is also being abused by several proprietary kernel > > > modules, some of which are not even security related. In one case, > > > there's code which dangerously revectors SELinux with a shim layer > > > designed to try and bypass the GPL. Some of this is a response to > > > unexporting the syscall table, where projects which abused that have now > > > switched to LSM. > > > > I agree that this is happening today. Which makes me wonder, why is the > > variable "security_ops" exported through "EXPORT_SYMBOL()" and not > > "EXPORT_SYMBOL_GPL()"? It seems that people are taking advantage of > > this and changing it would help slow them down a bit. > > > > Chris, would you take a patch to change this? > > Seems like a rather weak mechanism. Compared to eliminating > security_ops altogether. I agree. In looking over the code some more, I'm trying to figure out why we are exporting that variable at all. Is it because of people wanting to stack security modules? I see selinux code using it, but you are always built into the kernel, right? So unexporting it would not be an issue to you. Tony, would AppArmor have problems if we don't export that variable anymore? thanks, greg k-h