RE: [RFC v4 0/2] WhiteEgret LSM module

2018-11-19 Thread shinya1.takumi
We appreciate your comments. We refine source code according to your comments. >> This is an interesting idea, and an evolution since the initial >> approach which was submitted based upon xattr attributes. I still >> find the idea of using attributes simpler to manage though, since >> they're ea

RE: [RFC v4 0/2] WhiteEgret LSM module

2018-11-04 Thread shinya1.takumi
Steve Kemp wrote: > This is an interesting idea, and an evolution since the initial > approach which was submitted based upon xattr attributes. I still > find the idea of using attributes simpler to manage though, since > they're easy to add, and audit for. > > I suspect the biggest objection

RE: [RFC v3 0/2] WhiteEgret LSM module

2018-04-12 Thread shinya1.takumi
> Do you have a target date for posting that? Yes, we have the target date. We will submit WhiteEgret v4 by September. > So you have a design for being able to differentiate the interpreters > reading versus reading with the intent to execute? > With or without their help? We will provide WEUA sa

RE: [RFC v3 0/2] WhiteEgret LSM module

2018-04-05 Thread shinya1.takumi
I am one of developers of WhiteEgret. > regardling the last one, do you have a plan for handling it? Yes, we have a plan to release WhiteEgret v4 patch with a WEUA sample of access control for script programs. The latest WhiteEgret cannot control script programs since script files read by an in