what happened to SECURITY_DAC?

Kees Cook keescook at chromium.org
Thu Mar 21 16:36:09 UTC 2019

On Wed, Mar 20, 2019 at 5:39 PM Randy Dunlap <rdunlap at infradead.org> wrote:
> wow.  Commit 70b62c25665f636c9f6c700b26af7df296b0887e
> from last Sept. 14, 2018, total commit description says:
>     LoadPin: Initialize as ordered LSM
>     This converts LoadPin from being a direct "minor" LSM into an ordered LSM.
> Nowhere does it say anything like "this also deletes any notions of

This was a mistaken merge of chunks from a larger series that Casey
and I were working on. It should have been split out.

> Was this deletion a (sekrit) security issue that was not being highlighted on purpose?

No, just an error while refactoring to in creating CONFIG_LSM.

> and what do you recommend for simple DAC-like security?

See CONFIG_LSM. There are some related issues getting discussed here, too:

Kees Cook

More information about the Linux-security-module-archive mailing list