RE: RSBAC suggestions / Problems

From: Amon Ott <ao@rsbac.org>
Subject: RE: RSBAC suggestions / Problems
Date: Thu, 12 Jul 2001 11:05:00 +0200

Next Article (by Subject): RSBAC tutorial and paper at 8th International Linux Kongress Amon Ott
Previous Article (by Subject): RE: RSBAC suggestions / Problems Amon Ott
Top of Thread: RSBAC suggestions / Problems "Kaladis"
Articles sorted by: [Date] [Author] [Subject]

On Mit, 11 Jul 2001 Kaladis wrote:
> > You and all others: Do you think, there should be a global RSBAC config
> switch
> > 'Disable Linux filesystem access control', which disables all Linux
> filesystem
> > access control in vfs_permission()?
> 
> I'm not very fond of the idea to disable that globally. Instead of having it
> globally I would have it inheritant to a chosen directory or so. Everything

Selective disabling would be a lot more complex, because a real decision with
recursive lookup must be made. The current solution is even faster than the
original vfs_permission().

However, I will include this item to the 1.2.0 list. It can be optional, anyway.

Amon.
-
To unsubscribe from the rsbac list, send a mail to
majordomo@rsbac.org with
unsubscribe rsbac
as single line in the body.

Go to Compuniverse LWGate Home Page.