Re: vserver LSM progress

About this list Date view Thread view Subject view Author view Attachment view

From: Chris Wright (chris_at_wirex.com)
Date: Wed Oct 31 2001 - 16:05:00 EST


* Jacques Gelinas (jack_at_solucorp.qc.ca) wrote:
> On Fri, 26 Oct 2001 00:07:46 -0500, Chris Wright wrote
> > * Kyle Hayes (khayes_at_quicknet.net) wrote:
> > > It is increasingly possible to do things to the kernel and to the system as a
> > > whole through proc interfaces. How can that be controlled?
> >
> > /proc is a filesystem. since lsm easily controls all access to files
> > (and filesystems) this is how you control it. and i'd think it should
> > behave like vserver's sysctl interface.
>
> Does it offers way to limit visibility of files ?

yes.

-chris


About this list Date view Thread view Subject view Author view Attachment view

This archive was generated by hypermail 2.1.4 : Mon Aug 19 2002 - 12:01:00 EDT