[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <1170864403.11912.43.camel@moss-spartans.epoch.ncsc.mil>
Date: Wed, 07 Feb 2007 11:06:43 -0500
From: Stephen Smalley <sds@...ho.nsa.gov>
To: Chris Wright <chrisw@...s-sol.org>
Cc: Andreas Gruenbacher <agruen@...e.de>, Jeff Mahoney <jeffm@...e.de>,
Christoph Hellwig <hch@...radead.org>,
Tony Jones <tonyj@...e.de>, linux-kernel@...r.kernel.org,
linux-fsdevel@...r.kernel.org,
linux-security-module@...r.kernel.org, viro@...iv.linux.org.uk
Subject: Re: [RFC 0/28] Patches to pass vfsmount to LSM inode security hooks
On Wed, 2007-02-07 at 07:43 -0800, Chris Wright wrote:
> * Andreas Gruenbacher (agruen@...e.de) wrote:
> > Reiserfs currently only marks the ".reiserfs_priv" directory as private, but
> > not the files below it -- how about the attached patch to fix that?
>
> I don't think that's right. Look at ->create or ->lookup. Both of those
> properly set the private flag. This patch looks like a step backwards,
> sprinkling the init in so many places.
Yes, I thought that this was already covered by the existing inheritance
of the private flag from the parent directory.
On a separate note, I believe that the current problem with using
reiserfs and selinux is just that reiserfs hasn't been updated to call
security_inode_init_security() and set the security xattr when creating
a new file; see ext3 or jfs for an example. But I don't know of anyone
using reiserfs with selinux presently.
--
Stephen Smalley
National Security Agency
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists