Re: [TOMOYO 14/15] Conditional permission support.

2007-09-19 Thread Kyle Moffett
On Sep 19, 2007, at 08:15:53, Tetsuo Handa wrote: Kyle Moffett wrote: Look at it this way: What format do you use for your in-memory datastructures? If that format is not extremely close to the policy file format (with pointers replaced by 8-byte offsets), then you are using the wrong

Re: [TOMOYO 14/15] Conditional permission support.

2007-09-18 Thread Tetsuo Handa
Hello. Kyle Moffett wrote: This is probably not acceptable; I doubt there's a chance in hell that TOMOYO will get merged as long as it has text-based-language parsing in the kernel. You also have $NEW_RANDOM_ABUSE_OF_PROCFS and $PATH_BASED_LSM_ISSUES. See the long flamewars on AppArmor

Re: [TOMOYO 14/15] Conditional permission support.

2007-09-18 Thread Greg KH
On Tue, Sep 18, 2007 at 08:25:28PM +0900, Tetsuo Handa wrote: Hello. Kyle Moffett wrote: This is probably not acceptable; I doubt there's a chance in hell that TOMOYO will get merged as long as it has text-based-language parsing in the kernel. You also have

Re: [TOMOYO 14/15] Conditional permission support.

2007-09-18 Thread Tetsuo Handa
Hello. Kyle Moffett wrote: Yes, that's what securityfs is there for. Be mindful, though, that Thank you, I see. adding a text-based-language parser into securityfs is just as unacceptable as adding a text-based-language parser to procfs. Now, let me ask for some hints regarding

Re: [TOMOYO 14/15] Conditional permission support.

2007-08-28 Thread Tetsuo Handa
Hello. Kyle Moffett wrote: This is probably not acceptable; I doubt there's a chance in hell that TOMOYO will get merged as long as it has text-based-language parsing in the kernel. You also have $NEW_RANDOM_ABUSE_OF_PROCFS and $PATH_BASED_LSM_ISSUES. See the long flamewars on AppArmor for