A formal request for process clarifications.

Linus Torvalds torvalds at linux-foundation.org
Mon Dec 15 07:38:58 UTC 2025


On Mon, 15 Dec 2025 at 19:13, Dr. Greg <greg at enjellic.com> wrote:
>
> Three years ago our team had submitted for review our TSEM LSM that
> provides a framework for generic security modeling,

If you can't convince the LSM people to take your code, you sure can't
convince me.

I already think we have too many of those pointless things. There's a
fine line between diversity and "too much confusion because everybody
thinks they know best". And the linux security modules passed that
line years ago.

So my suggestion is to standardize on normal existing security models
instead of thinking that you can do better by making yet another one.
Or at least work with the existing people instead of trying to bypass
them and ignoring what they tell you.

Yes, I know that security people always think they know best, and they
all disagree with each other, which is why we already have tons of
security modules.  Ask ten people what model is the right one, and you
get fifteen different answers.

I'm not in the least interested in becoming some kind of arbiter or
voice of sanity in this.

              Linus



More information about the Linux-security-module-archive mailing list