Re: [malware-list] request for comment: generic kernel interface for malware vendors

[Greg KH <greg@kroah.com>]

On Wed, Jul 30, 2008 at 12:13:36PM +0100, tvrtko.ursulin@sophos.com wrote:
> malware-list-bounces@dmesg.printk.net wrote on 29/07/2008 05:50:58:
> 
> > On Mon, 2008-07-28 at 20:39 -0700, Greg KH wrote:
> > > On Mon, Jul 21, 2008 at 12:18:07AM -0400, Eric Paris wrote:
> > > > 
> > > > This is a request for comment.  This is a first stab and I'm here to
> > > > address all of the concerns that people have.  Please don't hold 
> back,
> > > > I've got thick skin.  BUT, I don't want to hear 'this is how we have
> > > > been doing it, do it that way.'  I want to hear how this won't work 
> for
> > > > your needs (and WHY) or how we can do it better.
> > > > 
> > > > you can find the patches at:
> > > > http://people.redhat.com/~eparis/talpa
> > 
> > Ouch. Adds a bunch of hooks outside of LSM - what's the plan here wrt.
> > LSM, because LKML folks are going to ask :)
> 
> What is the plan with LSM is also a question? Is it gonna stay or be 
> removed?

LSM is staying, no need to remove it.

> Stacking looks like it will never happen and so it really doesn't cut
> it for this kind of use.

Agreed, stacking is probably never going to happen.

thanks,

greg k-h