[PATCH 0/9] LSM: Stacking for major security modules - Based on 4.14-rc2

[Paul Moore]

On Fri, Oct 27, 2017 at 5:34 PM, Casey Schaufler <casey at schaufler-ca.com> wrote:
> Subject: [PATCH 0/9] LSM: Stacking for major security modules - Based on 4.14-rc2
>
> This patch set implements stacking for "major" security modules.

...

> I have tested these patches in various configurations of Ubuntu and
> Fedora. Smack and SELinux together pass test suites with some exceptions.
> There are conflicts with the way the modules treat network configurations.
> These conflicts are under investigation, and changes to Smack (and
> possibly SELinux) to reconcile the worst of the issues are in development.

This remains my big concern, especially the network support.  We've
talked about this a lot in person, but until I see the code which
deals with this I can't ack/nack this patchset.

-- 
paul moore
www.paul-moore.com
--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html