Messages in this thread | | | Subject | Re: [RFC][2.4 PATCH] A restricted /dev filesystem. | From | Tetsuo Handa <> | Date | Mon, 1 Nov 2004 22:16:31 +0900 |
| |
Hi, Kristian.
Thank you for your advise.
But this is 2.4, which LSM isn't integrated into. Also, I have experienced the difficulty of managing SELinux's policy. I agree what I want to do can be done with LSM, but I want more simpler approach.
Thank you.
In message <200411011343.00513.ks@cs.aau.dk> "Re: [RFC][2.4 PATCH] A restricted /dev filesystem." "<ks@cs.aau.dk>" wrote:
> E.g. these two statements of disallowing creation of hardlinks and regular > files in /dev can easily be implemented as a LSM module (see > include/linux/security.h). (I think) You will need to consider the hooks > inode_create and inode_link only. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |