[PATCH 0/5] LSM hook updates
From: Chris Wright (chrisw_at_osdl.org)
Date: 08/25/05
- Previous message: Steven Rostedt: "Re: [RFC] RT-patch update to remove the global pi_lock"
- Next in thread: Chris Wright: "[PATCH 5/5] Remove unnecesary capability hooks in rootplug."
- Reply: Chris Wright: "[PATCH 5/5] Remove unnecesary capability hooks in rootplug."
- Reply: Chris Wright: "[PATCH 4/5] Remove unnecessary default capability callbacks."
- Reply: Chris Wright: "[PATCH 1/5] Use capabilities as default w/ and w/out CONFIG_SECURITY."
- Reply: Chris Wright: "[PATCH 2/5] Rework stubs in security.h"
- Reply: Chris Wright: "[PATCH 3/5] Call security hooks conditionally if the security_op is filled out."
- Reply: James Morris: "Re: [PATCH 0/5] LSM hook updates"
- Reply: serue_at_us.ibm.com: "Re: [PATCH 0/5] LSM hook updates"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Wed, 24 Aug 2005 18:20:28 -0700 To: linux-security-module@wirex.com
This is based on Kurt's original work. The net effect is that
LSM hooks are called conditionally, and in all cases capabilities
provide the defaults. I've done some basic performance testing, and
found nothing surprising. I'm interested to see numbers from others
before I push this up. These are against Linus' current git tree (they
will clash with the -mm tree).
security/dummy.c | 996 ----------------------------
include/linux/security.h | 1665 ++++++++++++++++++++--------------------------- security/Makefile | 9
security/commoncap.c | 160 ++--
security/root_plug.c | 14
security/security.c | 62 -
6 files changed, 839 insertions(+), 2067 deletions(-)
thanks,
-chris
-- - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
- Previous message: Steven Rostedt: "Re: [RFC] RT-patch update to remove the global pi_lock"
- Next in thread: Chris Wright: "[PATCH 5/5] Remove unnecesary capability hooks in rootplug."
- Reply: Chris Wright: "[PATCH 5/5] Remove unnecesary capability hooks in rootplug."
- Reply: Chris Wright: "[PATCH 4/5] Remove unnecessary default capability callbacks."
- Reply: Chris Wright: "[PATCH 1/5] Use capabilities as default w/ and w/out CONFIG_SECURITY."
- Reply: Chris Wright: "[PATCH 2/5] Rework stubs in security.h"
- Reply: Chris Wright: "[PATCH 3/5] Call security hooks conditionally if the security_op is filled out."
- Reply: James Morris: "Re: [PATCH 0/5] LSM hook updates"
- Reply: serue_at_us.ibm.com: "Re: [PATCH 0/5] LSM hook updates"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|
