Re: [RFC][Patch 1/1] IBAC Patch

2007-06-20 Thread Mimi Zohar
On Tue, 2007-06-19 at 17:23 -0500, Serge E. Hallyn wrote: > > +#define get_file_security(file) ((unsigned long)(file->f_security)) > > +#define set_file_security(file, val) (file->f_security = (void *)val) > > + > > +#define get_task_security(task) ((unsigned long)(task->security)) > > +#define se

Re: [RFC][Patch 1/1] IBAC Patch

2007-06-19 Thread Serge E. Hallyn
Quoting Mimi Zohar ([EMAIL PROTECTED]): > This is a re-release of Integrity Based Access Control(IBAC) LSM module > which bases access control decisions on the new integrity framework > services. IBAC is a sample LSM module to help clarify the interaction > between LSM and Linux Integrity Modules(

[RFC][Patch 1/1] IBAC Patch

2007-06-18 Thread Mimi Zohar
This is a re-release of Integrity Based Access Control(IBAC) LSM module which bases access control decisions on the new integrity framework services. IBAC is a sample LSM module to help clarify the interaction between LSM and Linux Integrity Modules(LIM). New to this release of IBAC is digsig's f

Re: [RFC] [Patch 1/1] IBAC Patch

2007-03-14 Thread Seth Arnold
On Wed, Mar 14, 2007 at 07:25:26AM -0400, Mimi Zohar wrote: > It's a little bit of both. :-) Initially it was written to help me with :) > implementing and testing the integrity provider. But it could definitely > stand > on it's own. As Serge Hallyn commented http://lkml.org/lkml/2007/3/13/2

Re: [RFC] [Patch 1/1] IBAC Patch

2007-03-14 Thread Mimi Zohar
On Tue, 2007-03-13 at 19:27 -0700, Seth Arnold wrote: > On Thu, Mar 08, 2007 at 05:58:16PM -0500, Mimi Zohar wrote: > > This is a request for comments for a new Integrity Based Access > > Control(IBAC) LSM module which bases access control decisions > > on the new integrity framework services. >

[RFC] [Patch 1/1] IBAC Patch

2007-03-14 Thread Mimi Zohar
This is a posting of an updated IBAC patch, based on comments from the LSM and LKML mailing lists, which include the following fixes: - Updated Kconfig SECURITY_IBAC description and SECURITY_IBAC_BOOTPARAM default value - Prefixed all log messages with "ibac:" - Redefined a couple of

Re: [RFC] [Patch 1/1] IBAC Patch

2007-03-14 Thread Mimi Zohar
On Tue, 2007-03-13 at 10:31 -0500, Serge E. Hallyn wrote: > Quoting Mimi Zohar ([EMAIL PROTECTED]): > > On Thu, 2007-03-08 at 22:19 -0500, [EMAIL PROTECTED] wrote: > > > On Thu, 08 Mar 2007 17:58:16 EST, Mimi Zohar said: > > > > This is a request for comments for a new Integrity Based Access > > >

Re: [RFC] [Patch 1/1] IBAC Patch

2007-03-13 Thread Seth Arnold
On Thu, Mar 08, 2007 at 05:58:16PM -0500, Mimi Zohar wrote: > This is a request for comments for a new Integrity Based Access > Control(IBAC) LSM module which bases access control decisions > on the new integrity framework services. Thanks Mimi, nice to see an example of how the integrity framewo

Re: [RFC] [Patch 1/1] IBAC Patch

2007-03-13 Thread Serge E. Hallyn
Quoting Mimi Zohar ([EMAIL PROTECTED]): > On Thu, 2007-03-08 at 22:19 -0500, [EMAIL PROTECTED] wrote: > > On Thu, 08 Mar 2007 17:58:16 EST, Mimi Zohar said: > > > This is a request for comments for a new Integrity Based Access > > > Control(IBAC) LSM module which bases access control decisions > >

Re: [RFC] [Patch 1/1] IBAC Patch

2007-03-12 Thread Mimi Zohar
On Thu, 2007-03-08 at 22:19 -0500, [EMAIL PROTECTED] wrote: > On Thu, 08 Mar 2007 17:58:16 EST, Mimi Zohar said: > > This is a request for comments for a new Integrity Based Access > > Control(IBAC) LSM module which bases access control decisions > > on the new integrity framework services. > > >

Re: [RFC] [Patch 1/1] IBAC Patch

2007-03-09 Thread Randy Dunlap
On Fri, 09 Mar 2007 08:19:36 -0500 Mimi Zohar wrote: > On Thu, 2007-03-08 at 15:08 -0800, Randy Dunlap wrote: > > On Thu, 08 Mar 2007 17:58:16 -0500 Mimi Zohar wrote: > > > > > This is a request for comments for a new Integrity Based Access > > > Control(IBAC) LSM module which bases access contro

Re: [RFC] [Patch 1/1] IBAC Patch

2007-03-09 Thread Serge E. Hallyn
Quoting [EMAIL PROTECTED] ([EMAIL PROTECTED]): > On Thu, 08 Mar 2007 17:58:16 EST, Mimi Zohar said: > > This is a request for comments for a new Integrity Based Access > > Control(IBAC) LSM module which bases access control decisions > > on the new integrity framework services. > > > > (Hopefully

Re: [RFC] [Patch 1/1] IBAC Patch

2007-03-09 Thread Mimi Zohar
On Thu, 2007-03-08 at 15:08 -0800, Randy Dunlap wrote: > On Thu, 08 Mar 2007 17:58:16 -0500 Mimi Zohar wrote: > > > This is a request for comments for a new Integrity Based Access > > Control(IBAC) LSM module which bases access control decisions > > on the new integrity framework services. > > >

Re: [RFC] [Patch 1/1] IBAC Patch

2007-03-08 Thread Valdis . Kletnieks
On Thu, 08 Mar 2007 17:58:16 EST, Mimi Zohar said: > This is a request for comments for a new Integrity Based Access > Control(IBAC) LSM module which bases access control decisions > on the new integrity framework services. > > (Hopefully this will help clarify the interaction between an LSM > m

Re: [RFC] [Patch 1/1] IBAC Patch

2007-03-08 Thread Randy Dunlap
On Thu, 08 Mar 2007 17:58:16 -0500 Mimi Zohar wrote: > This is a request for comments for a new Integrity Based Access > Control(IBAC) LSM module which bases access control decisions > on the new integrity framework services. > > (Hopefully this will help clarify the interaction between an LSM

[RFC] [Patch 1/1] IBAC Patch

2007-03-08 Thread Mimi Zohar
This is a request for comments for a new Integrity Based Access Control(IBAC) LSM module which bases access control decisions on the new integrity framework services. (Hopefully this will help clarify the interaction between an LSM module and LIM module.) Index: linux-2.6.21-rc3-mm2/security/ib