linux-kernel - Re: [PATCH] ACL supports to mqueue

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Fri, 28 Oct 2011 10:47:11 +1100 (EST)
From:	James Morris <jmorris@...ei.org>
To:	Zhou Peng <ailvpeng25@...il.com>
cc:	Casey Schaufler <casey@...aufler-ca.com>,
	Christoph Hellwig <hch@...radead.org>,
	linux-security-module@...r.kernel.org,
	LKML <linux-kernel@...r.kernel.org>,
	linux-fsdevel <linux-fsdevel@...r.kernel.org>
Subject: Re: [PATCH] ACL supports to mqueue

On Thu, 27 Oct 2011, James Morris wrote:

> On Tue, 25 Oct 2011, Zhou Peng wrote:
> 
> > Hi, how about this patch pls?
> 
> I'm not convinced that this is a necessary feature for the mainline 
> kernel.

It also needs more review, from at least other security folk, and ideally
also from fs/vfs folk.

Why does NFSARK want this supportr?  Are its users asking for it?  (I 
couldn't find the distro, btw).



> 
> > 
> > On Fri, Oct 21, 2011 at 6:46 PM, Zhou Peng <ailvpeng25@...il.com> wrote:
> > > * In general, it can give a more fine grained and flexible DAC to msg queue obj.
> > > * NFSARK(A distro) wants all posix ipc objects to support ACL, including mqueue.
> > > * Posix semphore and shmem both support ACL, but mqueue as one of the
> > > three basic ipc doesn't.
> > > * At least, it may save one note sentence for MQ_OVERVIEW(7)   ^_^
> > >    "Linux does not currently (2.6.26) support the use of access
> > > control lists (ACLs) for POSIX message queues."
> > >    http://www.kernel.org/doc/man-pages/online/pages/man7/mq_overview.7.html
> > >
> > > On Thu, Oct 20, 2011 at 11:33 PM, James Morris <jmorris@...ei.org> wrote:
> > > > On Thu, 20 Oct 2011, Zhou Peng wrote:
> > > >
> > > >> This patch adds ACL supports to mqueue filesystem.
> > > >> Based on Linux 3.0.4.
> > > >
> > > > Why is this necessary, and who is planning to use it?
> > > >
> > > > Are any distros likely to enable this?
> > > >
> > 
> 
> -- 
> James Morris
> <jmorris@...ei.org>

-- 
James Morris
<jmorris@...ei.org>