login
Header Space

 
 

Re: [PATCH 03/11] VFS: Add security label support to *notify

Score:
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
To: David P. Quigley <dpquigl@...>
Cc: <hch@...>, <viro@...>, <trond.myklebust@...>, <bfields@...>, <linux-kernel@...>, <linux-fsdevel@...>
Date: Thursday, February 28, 2008 - 7:54 pm

On Wed, Feb 27, 2008 at 05:11:26PM -0500, David P. Quigley wrote:

Please don't overload setattr with this.  Just looking at your callers
shows that it's much cleaner as a separate method.

Now what's really lacking is a desciption _why_ you actually need it
to start with.  The current method to set security labels is through
the security.* xattrs.  Now if we want to clean up that somewhat
messy method that might be a good idea, but we should do it for all
callers and not just some.


An any inotify/dnotify additions should be separate from the vfs to
filesystem interface.  Please make it a separate patch and describe
properly why it's needed in it's description.

---end quoted text---
--
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
RFC Labeled NFS Initial Code Review, David P. Quigley, (Wed Feb 27, 6:11 pm)
Re: RFC Labeled NFS Initial Code Review, Dave Quigley, (Wed Feb 27, 9:23 pm)
Re: RFC Labeled NFS Initial Code Review, Dave Quigley, (Wed Feb 27, 8:48 pm)
[PATCH 06/11] SELinux: Add new labeling type native labels, David P. Quigley, (Wed Feb 27, 6:11 pm)
[PATCH 03/11] VFS: Add security label support to *notify, David P. Quigley, (Wed Feb 27, 6:11 pm)
Re: [PATCH 03/11] VFS: Add security label support to *notify, Christoph Hellwig, (Thu Feb 28, 7:54 pm)
Re: [PATCH 03/11] VFS: Add security label support to *notify, Christoph Hellwig, (Thu Feb 28, 8:23 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel xa..., Christoph Hellwig, (Thu Feb 28, 7:48 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel xa..., Christoph Hellwig, (Thu Feb 28, 8:39 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel xa..., Christoph Hellwig, (Thu Feb 28, 9:00 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel xa..., Christoph Hellwig, (Thu Feb 28, 8:51 pm)
[PATCH 11/11] NFSD: Server implementation of MAC Labeling, David P. Quigley, (Wed Feb 27, 6:11 pm)
[PATCH 09/11] NFS: Client implementation of Labeled-NFS, David P. Quigley, (Wed Feb 27, 6:11 pm)
speck-geostationary