From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932279AbVHYQ33 (ORCPT ); Thu, 25 Aug 2005 12:29:29 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S932283AbVHYQ33 (ORCPT ); Thu, 25 Aug 2005 12:29:29 -0400 Received: from e35.co.us.ibm.com ([32.97.110.133]:3764 "EHLO e35.co.us.ibm.com") by vger.kernel.org with ESMTP id S932279AbVHYQ32 (ORCPT ); Thu, 25 Aug 2005 12:29:28 -0400 Date: Thu, 25 Aug 2005 11:28:03 -0500 From: serue@us.ibm.com To: Chris Wright Cc: Stephen Smalley , serue@us.ibm.com, linux-security-module@wirex.com, Greg Kroah , linux-kernel@vger.kernel.org, Kurt Garloff , James Morris Subject: Re: [PATCH 5/5] Remove unnecesary capability hooks in rootplug. Message-ID: <20050825162803.GA18114@sergelap.austin.ibm.com> References: <20050825012028.720597000@localhost.localdomain> <20050825012150.490797000@localhost.localdomain> <20050825143807.GA8590@sergelap.austin.ibm.com> <1124982836.3873.78.camel@moss-spartans.epoch.ncsc.mil> <20050825162101.GU7762@shell0.pdx.osdl.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20050825162101.GU7762@shell0.pdx.osdl.net> User-Agent: Mutt/1.5.8i Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Quoting Chris Wright (chrisw@osdl.org): > * Stephen Smalley (sds@epoch.ncsc.mil) wrote: > > On Thu, 2005-08-25 at 09:38 -0500, serue@us.ibm.com wrote: > > > Ok, with the attached patch SELinux seems to work correctly. You'll > > > probably want to make it a little prettier :) Note I have NOT ran the > > > ltp tests for correctness. I'll do some performance runs, though > > > unfortunately can't do so on ppc right now. > > > > Note that the selinux tests there _only_ test the SELinux checking. So > > if these changes interfere with proper stacking of SELinux with > > capabilities, that won't show up there. > > Sorry, I'm not parsing that? > -chris That was in reference to running the LTP selinux tests: that running them successfully will not mean selinux and capability are working together correct. thanks, -serge