Re: [PATCH 5/5] LSM: SELinux changes to allow LSM stacking

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, 2012-09-05 at 10:38 -0400, Stephen Smalley wrote:
> On Tue, 2012-09-04 at 19:09 -0700, Casey Schaufler wrote:
> > Subject: LSM: SELinux changes to allow LSM stacking
> > 
> > Change security blob accesses to use the lsm_get/lsm_set
> > interfaces. This requires removal of the cred pointer
> > poisoning in selinux_cred_free.
> > 
> > Signed-off-by: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
> 
> FWIW, passes the selinux-testsuite with SELinux and Yama enabled.

However, setting SELINUX=disabled in /etc/selinux/config and rebooting
with this kernel yields a kernel panic during reset_security_ops(),
called by selinux_disable().

-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.


[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux