grsecurity forums

Hello,

in the kernel configuration for grsecurity/PAX, what is the difference between "MAC integration=direct" and "MAC integration=hook" ?

Regards
Christoph

Christoph wrote:in the kernel configuration for grsecurity/PAX, what is the difference between "MAC integration=direct" and "MAC integration=hook" ?

a direct function call vs. a call through a function pointer. e.g., grsec has the former while RSBAC has the latter.