LSM of Dazuko on kernel 2.6.32

--===============0244938293==
Content-Type: multipart/alternative; boundary=20cf305b122e616a64049c8c7802

--20cf305b122e616a64049c8c7802
Content-Type: text/plain; charset=ISO-8859-1

Hi John,
    These days I am trying to find a way to do execve hook on 2.6.32 kernel.

    I  have tried dazukofs, it works with risk because we can't stop it
after we mount a directory as dazukofs. The only way is to reboot the OS. If
I mount watching directories to dazukofs, it has some potential impact to my
server.
    Also I tried redirfs, it only supports open and close hook not support
execve hook.
    At the end I tried to port Dazuko (LSM way) to kernel 2.6.32. The execve
hook works fine with dazuko-LSM. But after I modify all the security APIs
for 2.6.32, I found the kernel API  register_security is not exported event
there is no kernel API unregister_security.

    So I hope I can get some suggestions from you:
    1. Is it possibile that I continue to use LSM on kernel 2.6.32? How can
I do this? It seems kernel developers want to remove LSM from future kernel.

     2. Can Dazuko catch execve events with RedirFS on kernel 2.6.32?

     Looking forward to your suggestions.

Thanks a lot,
Errik

--20cf305b122e616a64049c8c7802
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div>Hi John,</div>
<div>=A0=A0=A0 These days I am trying to find a way to do execve hook on 2.=
6.32 kernel. </div>
<div>=A0=A0=A0 I=A0 have tried dazukofs, it works with risk because we can&=
#39;t stop it after we mount a directory as dazukofs. The only way is to re=
boot the OS. If I mount watching directories to dazukofs, it has some poten=
tial impact to my server.</div>

<div>=A0=A0=A0 Also I tried redirfs, it only supports open and close hook n=
ot support execve hook.</div>
<div>=A0=A0=A0 At the end=A0I tried to port Dazuko (LSM way) to kernel 2.6.=
32. The execve hook works fine with dazuko-LSM. But after I modify all the =
security APIs for 2.6.32, I found the kernel API=A0 register_security is no=
t exported event there is no kernel API unregister_security. </div>

<div>=A0=A0 </div>
<div>=A0=A0=A0 So I hope I can get some suggestions from you:</div>
<div>=A0=A0=A0 1. Is it possibile that I continue to use LSM on kernel 2.6.=
32? How can I do this? It seems kernel developers want to remove LSM from f=
uture kernel.</div>
<div>=A0=A0=A0 </div>
<div>=A0=A0=A0=A0 2. Can Dazuko catch execve events with RedirFS on kernel =
2.6.32?</div>
<div>=A0</div>
<div>=A0=A0=A0=A0 Looking forward to your suggestions.</div>
<div>=A0</div>
<div>Thanks a lot,</div>
<div>Errik</div>
<div>=A0</div>
<div>=A0</div>
<div>=A0</div>
<div>=A0=A0=A0 </div>

--20cf305b122e616a64049c8c7802--


--===============0244938293==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Dazuko-devel mailing list
[email protected]
http://lists.nongnu.org/mailman/listinfo/dazuko-devel

--===============0244938293==--