Bug#336561: linux-image-2.6.14-1-686: CONFIG_SECURITY_CAPABILITIES=y in 2.6.14 prevents realtime-lsm being used with a stock kernel

[Arthur Marsh <arthur.marsh@internode.on.net>]

OK, as it turned out, realtime.ko built against the 2.6.14 kernel source 
wouldn't load on 2.6.14 even after 2.6.14 had been rebuilt with 
CONFIG_SECURITY_CAPABILITIES=M.

The motivation for attempting it in the first place was to give xmms the 
ability to run in realtime mode (and xmms runs here fine without realtime).

It's not a big problem, just that I hadn't seen the discussion on the 
change to CONFIG_SECURITY_CAPABILITIES.

Regards,

Arthur.

Sven Luther wrote:
> reassign 336561 realtime-lsm 
> thanks
> On Mon, Oct 31, 2005 at 06:32:58PM +1030, Arthur Marsh wrote:
>
> > Package: linux-image-2.6.14-1-686
> > Version: 2.6.14-1
> > Severity: normal
> > Tags: patch
> >
> >
> > Hi, I tried to build the realtime-lsm against 2.6.14 and it complained 
> > that it couldn't do so unless CONFIG_SECURITY_CAPABILITIES was built 
> > into the kernel as a module.
> >
> > Fix:
> >
> > CONFIG_SECURITY_CAPABILITIES=m
> >
> > I'm just about to try installing the realtime-lsm against a kernel 
> > rebuilt with CONFIG_SECURITY_CAPABILITIES=m
>
>
> This has been discussed in the past, but it seems there are security issues
> why building CONFIG_SECURITY_CAPABILITIES as modules is not a good idea.
>
> Also, it seems that realtime-lsm is rather broken if it really needs a modular
> CONFIG_SECURITY_CAPABILITIES, and should be fixed, reassigning to it.
>
> Friendly,
>
> Sven Luther