Subject: Re: Integrating securelevel and kauth(9)
To: YAMAMOTO Takashi <yamt@mwd.biglobe.ne.jp>
From: Martin Husemann <martin@duskware.de>
List: tech-kern
Date: 03/27/2006 13:20:35
On Mon, Mar 27, 2006 at 07:57:51PM +0900, YAMAMOTO Takashi wrote:
> - if you want fine-grained control ("multiple knobs"),
> it should be another listener(s).
This sounds like a good aproach to me.
And yes, I do think that we want finer grained controll - at least remove
the obvious abuses of securelevel, as Thor pointed out, e.g. the packet filter
rule loading restrictions.
Martin