RE: lsm truly "generic" allowing complete choice? Clean? Simple? Idon't think so.

["LA Walsh" <law@tlinx.org>]

> From: Russell Coker
> linux-kernel mailing list removed from the CC list (again), they've 
> probably heard too much of this discussion already.  
---
	It was isolation away from the mainline kernel list that allowed
the current patchwork design.  Attempts to clarify the LSM list charter
which ended up on lkml resulted in movements to silence those 
questioning the emperor's new clothes (or lack thereof).  LSM project
members want their changes in the kernel code *today*.  It is appropriate
to discuss design methodolgy on the kernel list since design
methodology discussion was forbidden on lkml as was any interaction 
with the linux community.  Quite frankly, the brown-nosing, back-slapping
politics really put a bitter taste on things that were naively believed
to be based more on technocracy than making people 'look good' and
commercial self-interest.

> If making the DAC code a module slows down non-LSM servers 
> and takes a lot of 
> programmer time to implement, is it a useful effort?
---

	It was already done -- the mainline kernel modules were done in
about 2 person-months of motivated programmer time.   There was no measured slowdown of non-LSM servers.  Changes done earlier by
the same project
lead of that project had all changes in the mainline kernel code compile
to nothing when compiled out.  Performance was a consideration in the
implementation.

-l