Kernel Space: Should Security Modules be Dynamically Loadable?

LinuxSecurity.com: The ever-contentious Linux Security Modules (LSM) API is being debated once again on linux-kernel, not its removal, which Linus Torvalds came down firmly against, but whether it should allow security modules to be loaded dynamically. As part of 2.6.24, Torvalds merged a patch to convert LSM into a static interface, but has indicated a willingness to revert it. The key sticking point is whether there are real security modules that require the ability to be runtime-loaded. The debate continues over the Linux Security Module. The question is whether a security module should have the ability to load at runtime? Since the LSM connects to key parts of kernel space, a loadable module could open it vulnerable to a attack.

Related Items