Pro LSM stacking
Posted Jan 7, 2010 18:40 UTC (Thu) by eparis123
In reply to: Pro LSM stacking
Parent article: Restricting the network
The topic of stacking has been mentioned a lot in the linux-security list in the last two years.
Schaufler has been calling for it for a long time, but I remember some core people (Al viro) mentioning possible performance problems due to the increasing number of pointer dereferences in the kernel hot paths.
Ofcourse no one offered an implementation yet so that benchmarks can be done, but it seems we're getting closer to this point.
to post comments)