On 12/02/13 17:02, Casey Schaufler wrote: > On 2/12/2013 1:41 PM, J. Bruce Fields wrote: >> On Fri, Feb 08, 2013 at 07:39:08AM -0500, Steve Dickson wrote: >>> include/linux/security.h | 57 +++- >> ... >>> security/capability.c | 19 +- >>> security/security.c | 24 +- >>> security/selinux/hooks.c | 92 +++++- >>> security/selinux/include/security.h | 2 + >>> security/selinux/ss/policydb.c | 5 +- >>> security/smack/smack_lsm.c | 11 + >>> 33 files changed, 1352 insertions(+), 214 deletions(-) >> Are we still waiting on ACKs from the security people for these bits? > > I'm not going to NAK it, because I don't know it won't work, > but I'm not going to ACK it either, because I have not been > able to get it to work. I have no idea what the problem > might be, and the "obvious" things we've tried have proven > ineffective. I may have a bad set of user space tools. There > may be more work on Smack hooks required. I can't tell, and > there's way too much NFS set-up involved to make progress in > the limited time I have available. Would you please give me an example of what you have not gotten to work? steved. > > If you're waiting for my ACK, no, you don't have it. > If you're OK with a lack of NAK, go ahead. There will > be changes someday I suspect, but I can't put this high > enough on my priorities to devote the time required > just now. > >> >> --b. >> -- >> To unsubscribe from this list: send the line "unsubscribe linux-security-module" in >> the body of a message to majordomo@xxxxxxxxxxxxxxx >> More majordomo info at http://vger.kernel.org/majordomo-info.html >> > -- To unsubscribe from this list: send the line "unsubscribe linux-nfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html