lkml.org 
[lkml]   [2008]   [Aug]   [6]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [RFC 0/5] [TALPA] Intro to a linux interface for on access scanning
Paul Moore wrote:
> With multiple security markings on an entity then you have to decide if
> you want to consider every marking at each LSM instance, or a subset.
> The complexity in this case does go up dramatically, but I think the
> key point for our discussion is that it doesn't matter if the entity is
> a file or a packet.
>
>

Perhaps you're right. I'm thinking in terms of the notion that each
LSM can have an independent file system attribute, but if they all
want to use IP options we're talking about a very limited resource.
No real biggie, I mostly wanted to point out that there's more to
stacking than fetching multiple xattrs.



\
 
 \ /
  Last update: 2008-08-07 02:51    [W:0.152 / U:0.148 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site