2026-10-28 18:23 UTC
In multi-tasking operating systems you'll probably want to constrain what certain "userspace" processes are allowed to do, so Linux provides a number of different security models you can use to express these constraints. So how does it initialize them?
It iterates over an array of these security models. For each it carefully sets an enable flag (its behind a pointer which might reference static data) via a helper, appends (via another helper) to a couple arrays or outputs validation failures,
Replies (1)
-
@alcinnz@floss.social 2026-10-28 18:29
... normalizes various array pointers via a helper & repeatedly another in turn, invokes the security models init method if said model is enabled, & increments a counter. That validation before appending to the arrays include checking another array to see if it includes this one, that enabled flag, whether it fits in the array, & whether it violates an exclusive flag. 2/2 Fin for today!