Messages in this thread | | | Date | Wed, 5 Sep 2012 14:32:17 -0400 | Subject | Re: [PATCH] security: allow Yama to be unconditionally stacked | From | Eric Paris <> |
| |
On Wed, Sep 5, 2012 at 11:47 AM, Serge Hallyn <serge.hallyn@canonical.com> wrote: > Quoting Kees Cook (keescook@chromium.org): >> Unconditionally call Yama when CONFIG_SECURITY_YAMA_STACKED is selected, >> no matter what LSM module is primary. >> >> Ubuntu and Chrome OS already carry patches to do this, and Fedora >> has voiced interest in doing this as well. Instead of having multiple >> distributions (or LSM authors) carrying these patches, just allow Yama >> to be called unconditionally when selected by the new CONFIG. > > I don't really like having both the STACKED and non-stacked paths. But > I don't have a good alternative. > >> Signed-off-by: Kees Cook <keescook@chromium.org> > > Acked-by: Serge E. Hallyn <serge.hallyn@canonical.com>
I said basically the same thing to Kees off list. But I don't have an answer either.
Acked-by: Eric Paris <eparis@redhat.com>
| |