[ubuntu-hardened] list introductions

Steve Beattie steve at nxnw.org
Wed Oct 31 17:01:58 GMT 2007


On Tue, Oct 30, 2007 at 10:15:52PM -0700, Kees Cook wrote:
> I'd like to try to break the grsec patches up logically and add /proc
> runtime toggles for them. 

As long as the modular infrastructure for LSM is in place (even
if it requires static compilation) and you implement these as LSMs,
/sys/module/<modulename>/parameters/ is the place to put these toggles,
using the module_param infrastructure.

-- 
Steve Beattie
<steve at nxnw.org>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 194 bytes
Desc: not available
Url : https://lists.ubuntu.com/archives/ubuntu-hardened/attachments/20071031/6e95490c/attachment-0001.pgp 


More information about the ubuntu-hardened mailing list