[redhat-lspp] LSPP work items

[James Morris]

On Thu, 6 Oct 2005, David Howells wrote:

> James Morris <jmorris at redhat.com> wrote:
> 
> > Not sure how feasible or useful it would be to add a boot parameter for 
> > the key subsystem -- it introduces a system call, for example.
> 
> That could be done reasonably easily I think; it'd just slow things down a
> touch.
> 
> The three system calls and many of the interface functions would have to
> detect the fact that the key management code is disabled and return an
> appropriate error just in case something tried to use them.

Ok, the issue now is whether it's acceptable to implement a boot 
parameter, given that i-series machines don't support them, and thus may 
not be able to run the LSPP certified configuration if we use a boot 
parameter to disable the key subsystem.

Perhaps someone from IBM could comment.


- James
-- 
James Morris
<jmorris at redhat.com>