On Wed, 2009-09-23 at 13:32 +0200, Arjan van de Ven wrote:

On Wed, 23 Sep 2009 09:39:33 +0100
Tvrtko Ursulin [off-list ref] wrote:

quoted

Lived with it because there was no other option. We used LSM while it
was available for modules but then it was taken away. 

... at which point you could have submitted your LSM module for
inclusion... you'd be the first (and only?) Anti Virus vendor that
would be in the mainline kernel.. speaking of competitive advantage,
coming out of the box in all distributions.

And users would be left in a situation between choosing an LSM which
actually does in provable ways increase security and using an AV
scanner.  Until magic solves the LSM stacking problem (it's been tried,
no magic) I don't think any distro wants AV vendors as LSMs.

-Eric