Re: Out of tree module using LSM

From: Greg KH <greg@kroah.com>
To: Jon Masters <jonathan@jonmasters.org>
Cc: Jan Engelhardt <jengelh@computergmbh.de>,
	Valdis.Kletnieks@vt.edu, Christoph Hellwig <hch@infradead.org>,
	Al Viro <viro@ftp.linux.org.uk>,
	Casey Schaufler <casey@schaufler-ca.com>,
	"Tvrtko A. Ursulin" <tvrtko.ursulin@sophos.com>,
	linux-kernel@vger.kernel.org
Subject: Re: Out of tree module using LSM
Date: Thu, 29 Nov 2007 09:14:26 -0800	[thread overview]
Message-ID: <20071129171426.GD10024@kroah.com> (raw)
In-Reply-To: <1196355936.6473.74.camel@perihelion>

On Thu, Nov 29, 2007 at 12:05:36PM -0500, Jon Masters wrote:
> 
> On Thu, 2007-11-29 at 08:47 -0800, Greg KH wrote:
> > On Thu, Nov 29, 2007 at 11:36:12AM -0500, Jon Masters wrote:
> > > On Wed, 2007-11-28 at 17:07 -0800, Greg KH wrote:
> > > 
> > > > The easiest way is as Al described above, just have the userspace
> > > > program that wrote the file to disk, check it then.
> > > 
> > > But the problem is that this isn't just Samba, this is a countless
> > > myriad of different applications. And if one of them doesn't support
> > > on-access scanning, then the whole solution isn't worth using.
> > 
> > Ok, which specific applications do they care about?  Last time I asked
> > it was still limited to a very small handful, all of which would be
> > trivial to add such a hook to.
> 
> Like I said, I'm trying to put together a set of "feature requirements"
> that we can publish to LKML and get feedback.

Heh, ok, I did this a while ago, but I'd be interested in seeing this
done in public, on lkml this time around so that we have a thread to
point people at in the future when it comes up again :)

good luck,

greg k-h