Re: [AppArmor 39/45] AppArmor: Profile loading and manipulation, pathname matching | KernelTrap

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulation, pathname matching

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

From: Seth Arnold <seth.arnold@...>

To: Pavel Machek <pavel@...>

Cc: Greg KH <greg@...>, Crispin Cowan <crispin@...>, Andreas Gruenbacher <agruen@...>, Stephen Smalley <sds@...>, <jjohansen@...>, <linux-kernel@...>, <linux-security-module@...>, <linux-fsdevel@...>

Subject: Re: [AppArmor 39/45] AppArmor: Profile loading and manipulation, pathname matching

Date: Friday, June 15, 2007 - 8:07 pm

On Sat, Jun 16, 2007 at 01:39:14AM +0200, Pavel Machek wrote:
quoted text> > Pavel, please focus on the current AppArmor implementation. You're
> > remembering a flaw with a previous version of AppArmor. The pathnames
> > constructed with the current version of AppArmor are consistent and
> > correct.
>=20
> Ok, I did not know that this got fixed.
>=20
> How do you do that? Hold a lock preventing renames for a whole time
> you walk from file to the root of filesystem?

We've improved d_path() to remove many of its previous shortcomings:

eb3dfb0cb1f4a44e2d0553f89514ce9f2a9fcaf1

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:

[AppArmor 39/45] AppArmor: Profile loading and manipulation,..., , (Mon May 14, 7:06 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Pavel Machek, (Tue May 15, 5:20 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Andreas Gruenbacher, (Mon Jun 4, 5:03 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Stephen Smalley, (Wed Jun 6, 9:26 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Andreas Gruenbacher, (Fri Jun 8, 6:03 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Stephen Smalley, (Mon Jun 11, 11:16 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Greg KH, (Fri Jun 8, 8:17 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Crispin Cowan, (Sun Jun 10, 1:09 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Greg KH, (Fri Jun 15, 12:50 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Pavel Machek, (Fri Jun 15, 4:06 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Seth Arnold, (Fri Jun 15, 7:33 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Pavel Machek, (Fri Jun 15, 7:39 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Seth Arnold, (Fri Jun 15, 8:07 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Greg KH, (Fri Jun 15, 5:11 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Crispin Cowan, (Fri Jun 15, 7:30 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Pavel Machek, (Fri Jun 15, 8:02 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Lars Marowsky-Bree, (Thu Jun 21, 12:08 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Pavel Machek, (Thu Jun 21, 2:33 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., , (Thu Jun 21, 3:30 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Pavel Machek, (Thu Jun 21, 3:52 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Lars Marowsky-Bree, (Thu Jun 21, 3:35 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Lars Marowsky-Bree, (Thu Jun 21, 3:24 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Pavel Machek, (Thu Jun 21, 4:07 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Lars Marowsky-Bree, (Thu Jun 21, 4:21 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., John Johansen, (Thu Jun 21, 7:25 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., James Morris, (Thu Jun 21, 3:42 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Lars Marowsky-Bree, (Thu Jun 21, 3:54 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Stephen Smalley, (Thu Jun 21, 4:59 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., John Johansen, (Fri Jun 22, 4:06 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Stephen Smalley, (Fri Jun 22, 7:53 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., , (Fri Jun 22, 2:35 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Lars Marowsky-Bree, (Fri Jun 22, 8:42 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Stephen Smalley, (Fri Jun 22, 8:46 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Chris Mason, (Thu Jun 21, 8:34 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., James Morris, (Thu Jun 21, 9:06 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Chris Mason, (Fri Jun 22, 8:17 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., James Morris, (Fri Jun 22, 9:48 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Chris Mason, (Fri Jun 22, 10:02 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Pavel Machek, (Mon Jun 25, 11:14 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Lars Marowsky-Bree, (Tue Jun 26, 4:50 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., , (Mon Jun 25, 5:02 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., James Morris, (Fri Jun 22, 10:23 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., , (Fri Jun 22, 2:12 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Chris Mason, (Fri Jun 22, 1:30 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Pavel Machek, (Sun Jun 24, 4:43 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Chris Wright, (Fri Jun 22, 8:11 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Crispin Cowan, (Tue Jun 26, 5:01 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Toshiharu Harada, (Sat Jun 23, 8:10 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Toshiharu Harada, (Sat Jun 23, 8:40 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., John Johansen, (Fri Jun 22, 3:40 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Crispin Cowan, (Fri Jun 22, 12:17 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Stephen Smalley, (Fri Jun 22, 8:20 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Lars Marowsky-Bree, (Thu Jun 21, 5:17 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Stephen Smalley, (Fri Jun 22, 7:19 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Lars Marowsky-Bree, (Fri Jun 22, 7:37 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Stephen Smalley, (Fri Jun 22, 8:41 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Casey Schaufler, (Fri Jun 22, 12:06 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Lars Marowsky-Bree, (Fri Jun 22, 8:54 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Stephen Smalley, (Fri Jun 22, 9:22 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Stephen Smalley, (Fri Jun 22, 10:49 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Joshua Brindle, (Thu Jun 21, 8:16 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., , (Thu Jun 21, 8:28 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Joshua Brindle, (Thu Jun 21, 11:45 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Lars Marowsky-Bree, (Fri Jun 22, 6:49 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., , (Fri Jun 22, 1:07 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Lars Marowsky-Bree, (Thu Jun 21, 8:19 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Greg KH, (Fri Jun 15, 7:49 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Andreas Gruenbacher, (Thu Jun 21, 12:01 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Pavel Machek, (Thu Jun 21, 1:59 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Crispin Cowan, (Mon Jun 18, 2:48 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Seth Arnold, (Fri Jun 15, 8:18 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., James Morris, (Fri Jun 15, 10:19 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., James Morris, (Fri Jun 15, 9:46 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Greg KH, (Fri Jun 15, 8:29 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., , (Fri Jun 15, 8:01 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., James Morris, (Fri Jun 15, 9:41 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Greg KH, (Fri Jun 15, 8:31 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., , (Sat Jun 16, 4:09 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Greg KH, (Sat Jun 16, 12:24 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Pavel Machek, (Fri Jun 15, 8:20 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Andreas Gruenbacher, (Fri Jun 22, 5:59 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., James Morris, (Fri Jun 15, 5:42 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Greg KH, (Fri Jun 15, 7:50 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., James Morris, (Fri Jun 15, 9:21 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Greg KH, (Sat Jun 16, 12:23 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Casey Schaufler, (Fri Jun 15, 10:57 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., James Morris, (Fri Jun 15, 11:39 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Casey Schaufler, (Sun Jun 17, 9:51 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Joshua Brindle, (Mon Jun 18, 7:29 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Casey Schaufler, (Fri Jun 15, 2:01 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Stephen Smalley, (Fri Jun 15, 2:15 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Casey Schaufler, (Fri Jun 15, 4:43 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Stephen Smalley, (Mon Jun 18, 8:47 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Greg KH, (Fri Jun 15, 5:14 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Casey Schaufler, (Fri Jun 15, 6:37 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Karl MacMillan, (Fri Jun 15, 5:28 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Greg KH, (Fri Jun 15, 5:44 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Karl MacMillan, (Fri Jun 15, 6:24 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Stephen Smalley, (Mon Jun 18, 9:33 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Andreas Gruenbacher, (Thu Jun 21, 11:54 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Andreas Gruenbacher, (Sat Jun 9, 11:05 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., , (Sat Jun 9, 1:18 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Crispin Cowan, (Sun Jun 10, 4:54 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Joshua Brindle, (Sun Jun 10, 5:17 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Kyle Moffett, (Sat Jun 9, 12:18 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., , (Sat Jun 9, 12:46 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Kyle Moffett, (Sat Jun 9, 1:06 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., , (Sat Jun 9, 1:32 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Kyle Moffett, (Sat Jun 9, 3:50 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., , (Sat Jun 9, 4:43 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Sean, (Sat Jun 9, 1:46 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., , (Sat Jun 9, 3:13 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Joshua Brindle, (Sat Jun 9, 11:33 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Sean, (Sat Jun 9, 3:36 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., , (Sat Jun 9, 4:06 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Sean, (Sat Jun 9, 4:10 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Andreas Gruenbacher, (Sat Jun 9, 11:17 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Sean, (Sat Jun 9, 12:36 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., , (Fri Jun 8, 9:06 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Pavel Machek, (Sun Jun 10, 4:34 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., , (Sun Jun 10, 5:04 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Pavel Machek, (Sun Jun 10, 5:05 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Lars Marowsky-Bree, (Tue Jun 12, 1:03 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., , (Mon Jun 11, 2:27 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Jack Stone, (Thu Jun 14, 3:16 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., , (Thu Jun 14, 8:18 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Greg KH, (Fri Jun 15, 1:01 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Casey Schaufler, (Sun Jun 10, 4:04 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Crispin Cowan, (Sun Jun 10, 4:51 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., , (Mon Jun 11, 2:45 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Pavel Machek, (Mon Jun 11, 7:00 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Sean, (Mon Jun 11, 4:29 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., , (Mon Jun 11, 5:33 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Sean, (Mon Jun 11, 7:34 am)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Greg KH, (Wed Jun 6, 1:32 pm)

Re: [AppArmor 39/45] AppArmor: Profile loading and manipulat..., Pavel Machek, (Sat Jun 9, 7:47 pm)

Navigation

Mail archive search

Popular discussions


linux-kernel:
Mike Galbraith	Re: [PATCH][RSDL-mm 0/7] RSDL cpu scheduler for 2.6.21-rc3-mm2
Greg Kroah-Hartman	[PATCH 011/196] sysfs: Fix a copy-n-paste typo in comment
Artem Bityutskiy	[PATCH 04/44 take 2] [UBI] kernel-spce API header
Huang, Ying	Re: [RFC][PATCH 1/2 -mm] kexec based hibernation -v3: kexec jump
git:
Linus Torvalds	irc usage..
Nicolas Pitre	Re: Figured out how to get Mozilla into git
Elijah Newren	Trying to use git-filter-branch to compress history by removing large, obsolete bi...
Mike	Re: I don't want the .git directory next to my code.
linux-activists:
Theodore Ts'o	Re: Splitting comp.os.linux
Theodore Ts'o	Re: demand paging: proposal
Framstag	ftp-error: bind: Address already in use?
Ian Kluft	RESULT: comp.os.linux reorganization, all groups pass (part 1/3)
openbsd-misc:
GVG GVG	ssh_exchange_identification: Connection closed by remote host
Todd Pytel	IDE or SCSI virtual disks for VMWare image?
Chris Tankersley	Dell PERC 3/Di - No Disks Found
Wijnand Wiersma	Almost success: OpenBSD on Xen

Latest forum posts


magical mounts	11 hours ago	Linux kernel
Problem in scim in Fedora 9	12 hours ago	Linux general
The new Western Digital power saving drives	12 hours ago	Hardware
Battery Maximizer Software	1 day ago	Linux kernel
windows folder creation surprise	1 day ago	Windows
Firewall	2 days ago	OpenBSD
IP layer send packet	2 days ago	Linux kernel
dtrace for linux available	3 days ago	Linux kernel
Unable to mount ramdisk image using UBoot while upgrading to 2.6.15 kernel for a MPC8540 based target	3 days ago	Linux kernel
RealTek RTL8169 - can't connect	3 days ago	NetBSD

Show all forums...

Colocation donated by:

Who's online

There are currently 3 users and 938 guests online.

Online users

Syndicate