Kazuki Omo(Company) 写道: > I'm not sure this information is useful or not, but I just made > Sysmtecalls <-> security functions/capabilities mapping > sheets for understanding LSM's framework(and enhancement LIDS:-) ). > > You can download some Excel sheets from; > http://www.selinux.gr.jp/LIDS-JP/systemcalls.html > (These Excel sheets are made by OpenOffice, so it might have > some font problem.) > > I checked 2.6.20-kernel source code by using lxr and grep, > so I guess I have some mistakes in these files. > But I believe this sheet is helpful for checking current > LSM framework are "sufficient" or "insufficient". >
Hi Kazuki! Thank you for your information! The mappings are very useful! I'm sure that your mapping sheets are very good reference materials for people who are doing linux kernel security enhancements, thanks again! How did you make these mappings? By hand or automatically? If by hand, it must have taken you a lot of time. I think if would be great if we could have a script to generate these mapping automatically, thus we'll have a great tool for analysing the coverage in the kernel of the security functions. Best regards, hao - To unsubscribe from this list: send the line "unsubscribe linux-security-module" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
