OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Dividing securelevel implications to kauth(9) scopes

From: YAMAMOTO Takashi (yamtmwd.biglobe.ne.jp)
Date: Wed May 17 2006 - 20:50:09 CDT


> > besides, it can be done by listening more generic actions like "open".
> > in that case, you want to pass vnode pointer or dev_t, so that listener
> > can check if it's a "dangerous" device.
>
> That's the idea. The list is just where we *currently* check for
> the securelevel.

ok, fine.
your comment "it's clear we have no context needed" made me think
something like KAUTH_DRIVER_STICOPEN. :-)

YAMAMOTO Takashi