The future of the Linux Security Module API
Posted Apr 21, 2006 21:58 UTC (Fri) by bronson
Parent article: The future of the Linux Security Module API
This article seems to say that if LSM is removed, other modules like AppArmor would be left out in the cold.
Back in 2001, it was thought that a single security module could never be generally useful. An indirection layer would make it easy for developers to create a wealth of task-specific modules, easing the pressure on the kernel developers to merge oddball security patches. 5 years later, it's clear that nobody needs (or even cares about) task-specific security modules.
If LSM is removed, AppArmor and friends just need to to patch the kernel directly. It's mildly painful but, ultimately, it's a much better way of achieving the same result.
to post comments)