| |||||||||||||
|
| |||||||||||||
The future of the Linux Security Module APIThe future of the Linux Security Module APIPosted Apr 21, 2006 21:58 UTC (Fri) by bronson (subscriber, #4806)Parent article: The future of the Linux Security Module API
This article seems to say that if LSM is removed, other modules like AppArmor would be left out in the cold.
Back in 2001, it was thought that a single security module could never be generally useful. An indirection layer would make it easy for developers to create a wealth of task-specific modules, easing the pressure on the kernel developers to merge oddball security patches. 5 years later, it's clear that nobody needs (or even cares about) task-specific security modules.
If LSM is removed, AppArmor and friends just need to to patch the kernel directly. It's mildly painful but, ultimately, it's a much better way of achieving the same result.
(Log in to post comments)
|
|
||||||||||||