linux-kernel - Re: About ACL for IPC Object

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 23 Mar 2010 17:01:31 +0800
From:	zhou peng <ailvpeng25@...il.com>
To:	Casey Schaufler <casey@...aufler-ca.com>
Cc:	linux-security-module@...r.kernel.org, linux-next@...r.kernel.org,
	LKML <linux-kernel@...r.kernel.org>,
	linux-fsdevel@...r.kernel.org
Subject: Re: About ACL for IPC Object

Hi,

I have added ACL support to POSIX msg queue on linux kernel 2.6.32.
Casey Schaufler, would you or anyone like review the patch for me please?
The patch is attached.

Best,

2010/1/21 Casey Schaufler <casey@...aufler-ca.com>:
> zhou peng wrote:
>> Hi all,
>>
>> There are ACL in file system, but why there are no ACL implementation
>> in IPC object, eg. shm, message queue, FIFO?
>>
>
> Most people haven't noticed that IPC objects are even there, much less
> that they have mode bits and not ACLs. Even when we were doing security
> evaluations on Unix boxes in the 1990's they were considered insufficiently
> interesting to justify the additional work to do ACLs.
>
> If you really want ACLs on IPC objects it would make a dandy little
> project for a summer. I would be happy to review patches.
>
>> Is there any fine grained granting in ipc object just like in file object?
>>
>
> As Stephen Smalley points out, you can do it with SELinux, although
> that it rather like driving a thumbtack with a bulldozer.
>
>> Thanks,
>> Best
>>
>> --
>> zhoupeng
>> --
>> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
>> the body of a message to majordomo@...r.kernel.org
>> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>> Please read the FAQ at  http://www.tux.org/lkml/
>>
>>
>>
>
>



-- 
zhoupeng

Download attachment "mqueue_posix_acl_linux2.6.32.diff" of type "application/octet-stream" (10483 bytes)