Date: Mon, 4 Jun 2018 19:57:23 +0300 From: Steve Kemp <steve.backup.kemp@...il.com> Cc: Kernel Hardening <kernel-hardening@...ts.openwall.com>, LSM List <linux-security-module@...r.kernel.org>, Linux Kernel Mailing List <linux-kernel@...r.kernel.org> Subject: Re: [PATCH] proc: prevent a task from writing on its own /proc/*/mem > A configurable LSM is probably the right way to do this. I wonder how many out of tree LSM there are? Looking at the mainline kernel the only "small" LSM bundled is YAMA, and it seems that most of the patches proposing new ones eventually die out. I appreciate that there are probably a lot of "toy" or "local" modules out there for specific fields, companies, or products, but it does seem odd that there are so few discussed publicly. (The last two I remember were S.A.R.A and something relating to xattr-attributes being used to whitelist execution.) Steve
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.