Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <4DFF5CCA.6070206@redhat.com>
Date: Mon, 20 Jun 2011 10:44:26 -0400
From: Eric Paris <eparis@...hat.com>
To: Vasiliy Kulikov <segoon@...nwall.com>
CC: linux-kernel@...r.kernel.org, linux-security-module@...r.kernel.org,
        apparmor@...ts.ubuntu.com,
        "selinux@...ho.nsa.gov Stephen Smalley" <sds@...ho.nsa.gov>,
        James Morris <jmorris@...ei.org>, Eric Paris <eparis@...isplace.org>,
        John Johansen <john.johansen@...onical.com>,
        kernel-hardening@...ts.openwall.com, serge@...lyn.com
Subject: Re: [RFC v2] security: intoduce ptrace_task_may_access_current

On 06/20/2011 10:43 AM, Vasiliy Kulikov wrote:
> On Mon, Jun 20, 2011 at 10:22 -0400, Eric Paris wrote:
>> serge even if you disagree with all of that, you are definitely
>> going to need to review the capability changes added here.
>> Personally I'd like to see all of the capability changes done as a
>> separate patch from the ptrace changes.
> I'm afraid the patch series will not be bisectable (capabilities and
> ptrace code are very interconnected), but I'll try.

Just add the new functions, describe them, document them, but don't use 
them.  Then use them in the second patch.

-Eric

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.