|author||James Morris <firstname.lastname@example.org>||2007-10-16 23:31:32 -0700|
|committer||Linus Torvalds <email@example.com>||2007-10-17 08:43:07 -0700|
security: Convert LSM into a static interface
Convert LSM into a static interface, as the ability to unload a security module is not required by in-tree users and potentially complicates the overall security architecture. Needlessly exported LSM symbols have been unexported, to help reduce API abuse. Parameters for the capability and root_plug modules are now specified at boot. The SECURITY_FRAMEWORK_VERSION macro has also been removed. In a nutshell, there is no safe way to unload an LSM. The modular interface is thus unecessary and broken infrastructure. It is used only by out-of-tree modules, which are often binary-only, illegal, abusive of the API and dangerous, e.g. silently re-vectoring SELinux. [firstname.lastname@example.org: cleanups] [email@example.com: USB Kconfig fix] [firstname.lastname@example.org: fix LSM kernel-doc] Signed-off-by: James Morris <email@example.com> Acked-by: Chris Wright <firstname.lastname@example.org> Cc: Stephen Smalley <email@example.com> Cc: "Serge E. Hallyn" <firstname.lastname@example.org> Acked-by: Arjan van de Ven <email@example.com> Signed-off-by: Randy Dunlap <firstname.lastname@example.org> Signed-off-by: Andrew Morton <email@example.com> Signed-off-by: Linus Torvalds <firstname.lastname@example.org>
Diffstat (limited to 'security/Kconfig')
1 files changed, 3 insertions, 3 deletions
diff --git a/security/Kconfig b/security/Kconfig
index 460e5c9cf49..a94ee94cf49 100644
@@ -74,15 +74,15 @@ config SECURITY_NETWORK_XFRM
If you are unsure how to answer this question, answer N.
- tristate "Default Linux Capabilities"
+ bool "Default Linux Capabilities"
depends on SECURITY
This enables the "default" Linux capabilities functionality.
If you are unsure how to answer this question, answer Y.
- tristate "Root Plug Support"
- depends on USB && SECURITY
+ bool "Root Plug Support"
+ depends on USB=y && SECURITY
This is a sample LSM module that should only be used as such.
It prevents any programs running with egid == 0 if a specific