[PATCH 10/10] LSM: Blob sharing support for S.A.R.A and LandLock

Kees Cook keescook at chromium.org
Fri Sep 14 00:03:12 UTC 2018


On Thu, Sep 13, 2018 at 4:51 PM, Casey Schaufler <casey at schaufler-ca.com> wrote:
> On 9/13/2018 4:06 PM, Kees Cook wrote:
>> If security= is
>> specified, all other major LSMs are disabled (i.e. it is not possible
>> to switch between SELinux/AppArmor/SMACK without also disabling
>> TOMOYO).
>
> Correct.

If we assume patch 10 is the way forward, how could we go about fixing
this specific problem?

-Kees

-- 
Kees Cook
Pixel Security



More information about the Linux-security-module-archive mailing list