PAX MAC Intregration

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

PAX MAC Intregration

Postby Christoph » Sun Jan 06, 2008 7:38 am

Hello,

in the kernel configuration for grsecurity/PAX, what is the difference between "MAC integration=direct" and "MAC integration=hook" ?

Regards
Christoph
Christoph
 
Posts: 17
Joined: Sun Jan 06, 2008 5:56 am

Re: PAX MAC Intregration

Postby PaX Team » Sun Jan 06, 2008 10:37 am

Christoph wrote:in the kernel configuration for grsecurity/PAX, what is the difference between "MAC integration=direct" and "MAC integration=hook" ?
a direct function call vs. a call through a function pointer. e.g., grsec has the former while RSBAC has the latter.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm


Return to grsecurity support