Pro LSM stacking

Posted Jan 7, 2010 18:40 UTC (Thu) by eparis123 (guest, #59739)
In reply to: Pro LSM stacking by dwheeler
Parent article: Restricting the network

The topic of stacking has been mentioned a lot in the linux-security list in the last two years.

Schaufler has been calling for it for a long time, but I remember some core people (Al viro) mentioning possible performance problems due to the increasing number of pointer dereferences in the kernel hot paths.

Ofcourse no one offered an implementation yet so that benchmarks can be done, but it seems we're getting closer to this point.