Re: [PATCH] security: allow Yama to be unconditionally stacked

2012-09-05 Thread James Morris
On Tue, 4 Sep 2012, Kees Cook wrote: > Unconditionally call Yama when CONFIG_SECURITY_YAMA_STACKED is selected, > no matter what LSM module is primary. Applied to git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git next -- James Morris -- To unsubscribe from this list: s

Re: [PATCH] security: allow Yama to be unconditionally stacked

2012-09-05 Thread John Johansen
On 09/05/2012 11:32 AM, Eric Paris wrote: > On Wed, Sep 5, 2012 at 11:47 AM, Serge Hallyn > wrote: >> Quoting Kees Cook (keesc...@chromium.org): >>> Unconditionally call Yama when CONFIG_SECURITY_YAMA_STACKED is selected, >>> no matter what LSM module is primary. >>> >>> Ubuntu and Chrome OS alrea

Re: [PATCH] security: allow Yama to be unconditionally stacked

2012-09-05 Thread Eric Paris
On Wed, Sep 5, 2012 at 11:47 AM, Serge Hallyn wrote: > Quoting Kees Cook (keesc...@chromium.org): >> Unconditionally call Yama when CONFIG_SECURITY_YAMA_STACKED is selected, >> no matter what LSM module is primary. >> >> Ubuntu and Chrome OS already carry patches to do this, and Fedora >> has voic

Re: [PATCH] security: allow Yama to be unconditionally stacked

2012-09-05 Thread Serge Hallyn
Quoting Kees Cook (keesc...@chromium.org): > Unconditionally call Yama when CONFIG_SECURITY_YAMA_STACKED is selected, > no matter what LSM module is primary. > > Ubuntu and Chrome OS already carry patches to do this, and Fedora > has voiced interest in doing this as well. Instead of having multipl

[PATCH] security: allow Yama to be unconditionally stacked

2012-09-04 Thread Kees Cook
Unconditionally call Yama when CONFIG_SECURITY_YAMA_STACKED is selected, no matter what LSM module is primary. Ubuntu and Chrome OS already carry patches to do this, and Fedora has voiced interest in doing this as well. Instead of having multiple distributions (or LSM authors) carrying these patch