[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Dazuko-devel] Dazuko's 6th birthday (Wiki)

From: John Ogness
Subject: Re: [Dazuko-devel] Dazuko's 6th birthday (Wiki)
Date: Sat, 09 Feb 2008 11:36:58 +0100
User-agent: Gnus/5.11 (Gnus v5.11) Emacs/22.1 (berkeley-unix)

On 2008-02-08, Alon Bar-Lev <address@hidden> wrote:
>> The current release of Dazuko uses LSM to intercept file access
>> events. As of 2.6.24, LSM modules may no longer be kernel
>> modules. They _must_ be statically compiled into the kernel.
> This may impose a serious problem with distributions... I don't know
> if I will be able to push this into Gentoo users this way, and
> Gentoo are one of the easiest with regards to patching.

Yes, it may cause problems for distributions. I am considering adding
a kernel parameter so that Dazuko can be dynamically activated at boot
(like SElinux). Then distributions would be able to include the patch,
but leave Dazuko disabled. Users could then easily enable it with
somthing like "dazuko=1" as a boot parameter.

The only alternative is to avoid LSM.

John Ogness

Dazuko Maintainer

reply via email to

[Prev in Thread] Current Thread [Next in Thread]