linux/Documentation/DocBook
James Morris 20510f2f4e security: Convert LSM into a static interface
Convert LSM into a static interface, as the ability to unload a security
module is not required by in-tree users and potentially complicates the
overall security architecture.

Needlessly exported LSM symbols have been unexported, to help reduce API
abuse.

Parameters for the capability and root_plug modules are now specified
at boot.

The SECURITY_FRAMEWORK_VERSION macro has also been removed.

In a nutshell, there is no safe way to unload an LSM.  The modular interface
is thus unecessary and broken infrastructure.  It is used only by out-of-tree
modules, which are often binary-only, illegal, abusive of the API and
dangerous, e.g.  silently re-vectoring SELinux.

[akpm@linux-foundation.org: cleanups]
[akpm@linux-foundation.org: USB Kconfig fix]
[randy.dunlap@oracle.com: fix LSM kernel-doc]
Signed-off-by: James Morris <jmorris@namei.org>
Acked-by: Chris Wright <chrisw@sous-sol.org>
Cc: Stephen Smalley <sds@tycho.nsa.gov>
Cc: "Serge E. Hallyn" <serue@us.ibm.com>
Acked-by: Arjan van de Ven <arjan@infradead.org>
Signed-off-by: Randy Dunlap <randy.dunlap@oracle.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2007-10-17 08:43:07 -07:00
..
.gitignore [PATCH] DocBook: add .gitignore file 2006-01-10 08:01:52 -08:00
Makefile [S390] cio: Add s390-drivers book. 2007-10-12 16:13:00 +02:00
deviceiobook.tmpl Add recommended section IDs to deviceiobook.tmpl 2007-10-17 08:43:07 -07:00
filesystems.tmpl Add section IDs to Documentation/DocBook/filesystems.tmpl 2007-10-17 08:43:07 -07:00
gadget.tmpl Fix "make htmldocs" build break. 2007-10-17 08:43:07 -07:00
genericirq.tmpl [DocBook]: Fix two typos in generic IRQ docs. 2006-12-17 14:06:57 -08:00
kernel-api.tmpl security: Convert LSM into a static interface 2007-10-17 08:43:07 -07:00
kernel-hacking.tmpl docbook/kernel-hacking: fixup x86 path/file names 2007-10-13 09:52:26 -07:00
kernel-locking.tmpl DocBook: Change a headline in kernel-locking to list all three main types of locking. 2007-07-22 11:49:53 -07:00
libata.tmpl [SCSI] libsas: fix scr_read/write users and update the libata documentation 2007-07-20 15:52:08 -05:00
librs.tmpl docbook: librs typo fixes 2007-05-08 11:15:15 -07:00
lsm.tmpl Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
mcabook.tmpl docbook/mcabook: fixup x86 path/file names 2007-10-13 09:52:26 -07:00
mtdnand.tmpl Documentation/DocBook/mtdnand.tmpl: kmalloc + memset conversion to kzalloc 2007-08-01 11:03:17 +01:00
procfs-guide.tmpl update procfs-guide doc of read_func 2007-07-16 09:05:48 -07:00
procfs_example.c Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
rapidio.tmpl [PATCH] RapidIO support: core base 2005-11-07 07:53:46 -08:00
s390-drivers.tmpl [S390] cio: Add s390-drivers book. 2007-10-12 16:13:00 +02:00
stylesheet.xsl [PATCH] DocBook/HTML: Generate chapter/section level TOCs for functions 2007-02-11 10:51:30 -08:00
uio-howto.tmpl remove dubious legal statment from uio-howto 2007-08-09 08:40:21 -07:00
usb.tmpl USB: remove usb DocBook warnings 2007-05-22 23:45:48 -07:00
videobook.tmpl [PATCH] irq-flags: documentation: Use the new IRQF_ constants 2006-07-02 13:58:55 -07:00
wanbook.tmpl Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
writing_usb_driver.tmpl usb: writing_usb_driver free urb cleanup 2006-12-01 14:23:31 -08:00
z8530book.tmpl Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00