On Wed, Oct 26, 2011 at 6:51 AM, Tetsuo Handa from-centos@i-love.sakura.ne.jp wrote:
I'm providing 2 alternatives. One is TOMOYO 1.x (out of tree patches that require recompilation of kernel source package but can keep kernel ABI) and the other is AKARI (subset of TOMOYO 1.x but is a loadable kernel module). http://akari.sourceforge.jp/comparison.html
I checked the config options required for AKARI. Of the 5 options listed, one is not set in the current EL6 kernel:
# CONFIG_SECURITY_PATH is not set
You mentioned CONFIG_SECURITY_PATH is the one that breaks the kABI. But TOMOYO 1.x would not?
Akemi