Re: [PATCH][SELINUX] Extend and revise calls to secondary module

[Serge Hallyn <serue@us.ibm.com>]

On Thu, 2004-06-24 at 09:04, James Morris wrote:
> Is any of this work heading into the mainline kernel?

At least for stacking, I/we hope to submit two separate patches at some
point:

1. Permit multiplexing of kernel object security fields between multiple
LSM's, like trustedbsd's does.  Without this, many modules which it
makes sense to stack, cannot be stacked.  For instance, bsdjail and (as
of recently) DigSig, and either or both of the above with SELinux.

2. A (simpler than my current) stacker LSM.

But I definately hope they're heading into the mainline kernel  :-)

-- 
=======================================================
Serge Hallyn
Security Software Engineer, IBM Linux Technology Center
serue@us.ibm.com