-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Alle 09:25, giovedì 19 giugno 2003, hai scritto: Please Eugene, remember to cc also the mailing list next time. > i know... i am compiling my kernel with lsm now. the only constraint > at least for now is that.. i have no idea how i would be able to > prompt "password:" and wait for input from the user in kernel space.. > or at least if i am doing it in userspace, then how the kernel would > be able to inform the user process, and how the user process would > inform the kernel to permit or deny user to access a particular command. Do not. Lsm enforce you to put system wide access control based on user credential (uid, gid). You don't need to replicate username/password mechanism. > i know... my ideal situation is that i would plug a thumbprint scanner > so that my user can launch the program, identify him/herself by scanning > their thumbprint, and process to use the program. Sorry, are you talking about an hardware thumbprint scanner? Maybe root_plug module (inside newer development kernel) may help you. It is based upon LSM and I'll deny some operations when a usb key is not plugged. May be you want to put your needs in a clearer manner :) ciao ciao thesponge - -- $>cd /pub $>more beer (0> //\ Perego Paolo <p_perego@modiano.com> - www.sikurezza.org/angel V_/_ 'Diverso non significa necessariamente peggiore.' I'm Linux drow 2.4.19-4GB - SuSE Linux 8.1 (i386) powered. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQE+8XNde2SOXFIw7OcRAgbAAJ9G8BBJ9GCstRrKOVbKvKX+w5S+/QCeJE9+ Ao1FnUGQX778GT4Dvu8rRKg= =9PvJ -----END PGP SIGNATURE----- -- Kernelnewbies: Help each other learn about the Linux kernel. Archive: http://mail.nl.linux.org/kernelnewbies/ FAQ: http://kernelnewbies.org/faq/