On Tue, Oct 02, 2007 at 09:45:42PM -0700, Casey Schaufler wrote:
I _really_ don't like what you are doing with these symlinks.
For one thing, you have no exclusion between reading the list
entries and modifying them. For another... WTF is filesystem
making assumptions about the locations where the things are
mounted? Hell, even if you override your tmp symlink, what
happens if we want it in two chroot jails with different layouts?
I really don't get it; why not simply have something like
/smack/tmp.link resolve to tmp/<label> and have userland bind or mount
whatever you bloody like on /smack/tmp? No problems with absolute
paths, can be used in chroot jails with whatever layouts, ditto for
namespaces, etc. and both symlink and directory get created at
the same time (by one name). Hell, if you keep a reference
to dentry of directory in the data associated with symlink,
you can simply switch nd->dentry to that, drop the old one
and grab the reference to page containing label and return
it via nd_set_link(). No need to play with allocations, strcat,
yadda, yadda. readlink() can stuff the ->d_name of the same
dentry plus / plus label directly into user buffer; again, no
allocations needed and works fine anywhere.
-
