Gentoo Archives: gentoo-amd64

From: Kyle Lutze <kyle@×××××××××××.com>
To: gentoo-amd64@l.g.o
Subject: Re: [gentoo-amd64] Re: catch 22 with realtime-lsm and commoncap (capability dependency) modules
Date: Mon, 24 Apr 2006 03:56:17
Message-Id: 444C4B5B.8040602@randomvoids.com
In Reply to: [gentoo-amd64] Re: catch 22 with realtime-lsm and commoncap (capability dependency) modules by Duncan <1i5t5.duncan@cox.net>
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA1
3
4 Duncan wrote:
5 > Kyle Lutze posted <444C0482.4090408@×××××××××××.com>, excerpted below, on
6 > Sun, 23 Apr 2006 15:49:38 -0700:
7 >
8 >> re-emerging jack-audio-connection-kit with "-caps" did the trick, go
9 >> figure. everything else was perfect
10 >>
11 >> on a side note, if capabilities was replaced by realtime and lsm, why is
12 >> capabilities still in the 2.6 kernel?
13 >
14 > I'm not familiar with the 2.4 capacities module and how it worked, so
15 > can't answer that aspect of the question. However, in kernel 2.6, there's
16 > the Linux Security Module (LSM) framework. It's designed to expose the
17 > necessary kernel hooks for any of several different security module
18 > approaches in a pluggable way, so any of several modules can be enabled to
19 > take advantage of it.
20 >
21 > In 2.6, the capacities module is implemented using LSM, designed to plug
22 > into LSM and to provide the "traditional" Linux security implementation.
23 > Apparently, realtime-lsm is a second available plugin. IIRC there's at
24 > least a third as well, the BSD audit security framework, and I believe I
25 > read that SELinux has a module too, tho for all I know it uses the BSD
26 > audit module, perhaps with a few modifications, not its own separate
27 > module.
28 >
29 > It shouldn't therefore be entirely surprising that realtime-lsm and
30 > capacities conflict, as they are probably fighting for control of the same
31 > thing. Is it possible to use two different LSMs together in any case? I
32 > don't know, but it's evident that there's a conflict here. It appears you
33 > can use one or the other but not both at the same time. You plug in one,
34 > and it takes at least part of the interface the other one would plug
35 > into, so you can't plug in the other.
36 >
37
38 ahh the downfall of linux, people can't decide on one thing, so they
39 make two seperate ones, programs you use at the same time require both,
40 you get the shaft. Argg!!!
41
42 Kyle
43 -----BEGIN PGP SIGNATURE-----
44 Version: GnuPG v1.4.2.2-ecc0.1.6 (GNU/Linux)
45 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
46
47 iD8DBQFETEtbVFIipMnXxfYRAiLLAKCBq1djFyxTymPK992BGFL1zOgwrgCfUTv9
48 rDbAKAQtCy64TvKmVS6uFP4=
49 =RlMf
50 -----END PGP SIGNATURE-----
51 --
52 gentoo-amd64@g.o mailing list

Replies