| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20070621175955.GJ18392@elf.ucw.cz> Date: Thu, 21 Jun 2007 19:59:55 +0200 From: Pavel Machek <pavel@....cz> To: Andreas Gruenbacher <agruen@...e.de> Cc: Greg KH <greg@...ah.com>, Crispin Cowan <crispin@...ell.com>, Stephen Smalley <sds@...ho.nsa.gov>, jjohansen@...e.de, linux-kernel@...r.kernel.org, linux-security-module@...r.kernel.org, linux-fsdevel@...r.kernel.org Subject: Re: [AppArmor 39/45] AppArmor: Profile loading and manipulation, pathname matching On Thu 2007-06-21 18:01:05, Andreas Gruenbacher wrote: > On Saturday 16 June 2007 01:49, Greg KH wrote: > > But for those types of models that do not map well to internal kernel > > structures, perhaps they should be modeled on top of a security system that > > does handle the internal kernel representation of things in the way the > > kernel works. > > How exactly are struct vfsmount and struct dentry not in-kernel structures? That's what greg is talking about, AFAICT. Normal kernel code uses struct vfsmount + struct dentry. AA uses... guess what... char pathname[HUGE_VALUE]. Pavel -- (english) http://www.livejournal.com/~pavelmachek (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists