Messages in this thread | | | Date | Mon, 24 Apr 2006 08:09:49 -0500 | From | "Serge E. Hallyn" <> | Subject | Re: Time to remove LSM (was Re: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks) |
| |
Quoting Arjan van de Ven (arjan@infradead.org): > for all such things in the first place. In fact, we already know that to > do auditing, LSM is the wrong thing to do (and that's why audit doesn't > use LSM). It's one of those fundamental linux truths: Trying to be
As I recall it was simply decided that LSM must be "access control only", and that was why it wasn't used for audit.
Didn't Linda Walsh claim a much faster audit implementation using LSM than the current lightweight audit framework?
-serge - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |