Can you provide an example of a real LSM which can be safely unloaded and
also needs to be unloaded?
Why should we maintain infrastructure and extra complexity in the kernel
for theoretical or unknown modules ?
Linus has asked for any valid out of tree users who need a dynamic
interface to step forward. Where are they?
As one of the people who actually maintains LSM (rather than simply
speculates about it), I object to maintaining infrastructure which, to the
best of my knowledge, is only used by out of tree, binary, broken junk.
If you recall, the original motivation for this patch was when the idea
of adding a new capability to control security model unload was raised.
That is, new security infrastructure was being proposed merely to cater to
some other existing unnecessary security infrastructure. So, rather than
doing that, I proposed removing the unnecessary infrastructure.
I agree with Linus: if you can demonstrate a valid, concrete use for
dynamic LSMs, then the infrastructure to support them can easily be
reinstated.
But until then, it seems both reasonable and in keeping with good kernel
development practices, to not maintain unused infrastructure.
- James
--
James Morris
<jmorris@namei.org>
-
