Re: kernel stack challenge

[Chris Wright]

* Sergiy Lozovsky (serge_lozovsky@xxxxxxxxx) wrote:
> No :-) What you suggest is kernel should receive
> system call from user space. Instead of handling it -
> kernel should forward it back to userspace, than it
> should be forwarded back to the kernel. Looks not very
> nice to me. Why not to handle security policy inside
> the kernel as it is done for the file permissions and
> root priveleges?

All this can be done w/out having a LISP interpretter coming along for the
ride, that's the point of the other posters.  With LSM you have a
framework for implementing your own security model and enforcing your own
policies.

thanks,
-chris
-- 
Linux Security Modules     http://lsm.immunix.org     http://lsm.bkbits.net
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/