Re: Syscall trouble

[Chris Wright]

* Søren Nøhr Christensen (snc@xxxxxxxxx) wrote:
<snip>
> +#define __NR_umb_set_child_restrictions       284
<snip>

> Any suggestions?

Don't do it this way.  Use /proc/<pid>/attr/ interface if you only want
to handle creating restrictions within a process.  If you're using it to
load your policy, then create a reasonable filesystem interface and do
it that way.  This will be portable across versions and architectures
without allocating any syscalls.

thanks,
-chris
-- 
Linux Security Modules     http://lsm.immunix.org     http://lsm.bkbits.net
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/