bugDazuko - Bugs: bug #21417, the unregister_security hook was...

 
 

bug #21417: the unregister_security hook was removed in 2.6.24-rc1

Submitted by:  philip lawrence <amazingcs>
Submitted on:  Wed 24 Oct 2007 10:53:01 PM UTC  
 
Status: NoneAssigned to: John Ogness <ogman>
Open/Closed: Closed

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Sat 07 Jun 2008 12:18:43 AM UTC, comment #5:

As of Dazuko version 2.3.5, Dazuko is available as kernel patches. There is a patch for 2.6.24 that has been verified to work correctly.

John Ogness <ogman>
Project AdministratorIn charge of this item.
Tue 20 Nov 2007 02:30:18 PM UTC, comment #4:

Ok, yes, sorry, my mistake, the module i meant was commoncap which is neccessary.

Dirk Schoebel <emerald>
Tue 20 Nov 2007 09:37:54 AM UTC, comment #3:

I guess you would need to define "common functionality". I would expect that most systems do not need capability running.

But for those that do require capability, the possible options for using Dazuko are:

1. use a different kernel version, where capability is still a module

2. use the syscall-hooking option available in Dazuko

Both of the above options are only temporary workarounds, of course. But I am working to move Dazuko to the VFS layer, which will avoid the hooking and compatibility issues with Linux.

John Ogness <ogman>
Project AdministratorIn charge of this item.
Mon 19 Nov 2007 08:39:34 PM UTC, comment #2:

I suppose as direct effect of the removal of the unregister hook all LSM modules are no longer modules (for 2.6.24-rc3) but compiled in or not available at all. So the possibility to use dazuko while using the capability module is no longer given.
But since the capability module is necessary for some common functionality i can't really stop using this module.

Dirk Schoebel <emerald>
Fri 26 Oct 2007 03:29:35 PM UTC, comment #1:

Interesting. This appears to be the beginning of the end for LSM support. I can add a workaround for this, but DazukoFS is starting to become really important.

Thanks for pointing this out.

John Ogness <ogman>
Project AdministratorIn charge of this item.
Wed 24 Oct 2007 10:53:01 PM UTC, original submission:

the unregister_security hook was removed in linux-2.6.24-rc1, along with the code in security/security.c, which means that dazuko needs to have all code that depends on that hook removed or modified to compile properly.
I assume that the removal of the code associated with the hook, in the kernel, means that the change is permanent and not an oversight. The Documentation/Docbook/lsm.tmpl, in the kernel, still shows the unregister_security hook in the documentation, but I think that is an oversight.

philip lawrence <amazingcs>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by emerald (Posted a comment)
  • -unavailable- added by ogman (Posted a comment)
  • -unavailable- added by amazingcs (Submitted the item)
  • -unavailable- added by amazingcs
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 3 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sat 07 Jun 2008 12:18:43 AM UTCogmanOpen/ClosedOpen=>Closed
    Fri 26 Oct 2007 03:29:35 PM UTCogmanAssigned toNone=>ogman
    Wed 24 Oct 2007 10:53:01 PM UTCamazingcsCarbon-Copy-=>Added -unavailable-

    Back to the top


    Powered by Savane 3.1-cleanup1