Re: replace MAX_MAP_COUNT with /proc/sys/vm/max_map_count

[Chris Wright]

* Stephen Smalley (sds@xxxxxxxxxxxxxx) wrote:
> commit constraints.  Unless you envision introducing a different
> max_map_count for privileged processes, I'm not sure it is worthwhile to
> introduce a hook for the map_count check or to export this symbol to
> modules.  I've cc'd the LSM maintainer as well to see if he has a
> different view.

I agree with this.  BTW, am I missing an obvious reason the check
in split_vma is >= MAX_MAP_COUNT where the other two are simply >
MAX_MAP_COUNT?

thanks,
-chris
-- 
Linux Security Modules     http://lsm.immunix.org     http://lsm.bkbits.net
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/