Re: [PATCH] selinux: restrict kernel module loading

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Apr 4, 2016 at 6:03 PM, Jeffrey Vander Stoep <jeffv@xxxxxxxxxx> wrote:
>> IMHO, the target would be the kernel since its what is being affected by a
>> module sourced from foo.
>
> This was my thought as well. What I like about Paul's idea is that it
> creates consistency between finit_module and init_module. In either
> case the target of the operation is the kernel, but we're using target
> context to refer to the origin of the module, not the target of the
> operation. For finit_module the origin is a file, for init_module the
> origin is a process.

Close enough ;)

> Patch v2 is up.

Yep, I've been distracted with some other things today, but I'll take
a look tomorrow.

-- 
paul moore
www.paul-moore.com
_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.



[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux