tech-kern archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Secmodel cleanup


I'd like to cleanup the secmodel code a bit. Specifically:

  1. Separate the suser code from the bsd44 secmodel directory to its
own secmodel directory
  2. Turn our secmodels into modules
  3. Add a new "secmodel" module class, that will take care of the
"nsecmodel" count, thus allowing us to get rid of
  4. Separate non-suser (i.e., subsystem specific user-id/group-id
matching etc.) decisions from the suser secmodel code back into the
appropriate subsystem(s) as kauth(9) listeners (this is similar to
what Iain had done in the bluetooth code)

Are there any objections to such changes?



Home | Main Index | Thread Index | Old Index