Re: [AppArmor 32/45] Enable LSM hooks to distinguish operations on file descriptors from operations on pathnames

!MAILaRCHIVE_VOTE_RePLACE
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
To: Miklos Szeredi <mszeredi@...>
Cc: <jjohansen@...>, <akpm@...>, <linux-kernel@...>, <linux-security-module@...>
Date: Friday, October 26, 2007 - 4:24 pm

On Friday 26 October 2007 13:30, Miklos Szeredi wrote:

So what do you think where the inodes come from for syscalls like fchmod? Out 
of struct file, of course. But your f_op->getattr and f_op->setattr patches 
are meant for passing struct file down to filesystems anyway, so that 
completely contradicts what you are saying above.


That's nothing but a replacement for ATTR_FILE and iattr->ia_file. Except by 
removing the ATTR_FILE flag, LSMs will no longer get that information for 
distinguishing file descriptor operations from other operations.

AppArmor needs to know when notify_change is called on a file descriptor, but 
it doesn't care about the file descriptor itself. So any way of passing along 
that information will be fine.

Thanks,
Andreas
-
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
Re: [AppArmor 32/45] Enable LSM hooks to distinguish operati..., Andreas Gruenbacher, (Fri Oct 26, 4:24 pm)
Re: [AppArmor 32/45] Enable LSM hooks to distinguish operati..., Andreas Gruenbacher, (Fri Oct 26, 5:56 pm)