lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-Id: <1193401943.11953.3.camel@moss-spartans.epoch.ncsc.mil> Date: Fri, 26 Oct 2007 08:32:23 -0400 From: Stephen Smalley <sds@...ho.nsa.gov> To: jjohansen@...e.de Cc: akpm@...ux-foundation.org, linux-kernel@...r.kernel.org, linux-security-module@...r.kernel.org, Andreas Gruenbacher <agruen@...e.de> Subject: Re: [AppArmor 35/45] Allow permission functions to tell between parent and leaf checks On Thu, 2007-10-25 at 23:40 -0700, jjohansen@...e.de wrote: > plain text document attachment (parent-permission.diff) > Set the LOOKUP_CONTINUE flag when checking parent permissions. This allows > permission functions to tell between parent and leaf checks. > > Signed-off-by: Andreas Gruenbacher <agruen@...e.de> > Signed-off-by: John Johansen <jjohansen@...e.de> > > --- > fs/namei.c | 6 ++++++ > 1 file changed, 6 insertions(+) > > --- a/fs/namei.c > +++ b/fs/namei.c > @@ -1472,6 +1472,10 @@ static int may_delete(struct inode *dir, > BUG_ON(victim->d_parent->d_inode != dir); > audit_inode_child(victim->d_name.name, victim, dir); > > +#if 0 > + if (nd) > + nd->flags |= LOOKUP_CONTINUE; > +#endif #if 0? > error = permission(dir,MAY_WRITE | MAY_EXEC, NULL); > if (error) > return error; > @@ -1509,6 +1513,8 @@ static inline int may_create(struct inod > return -EEXIST; > if (IS_DEADDIR(dir)) > return -ENOENT; > + if (nd) > + nd->flags |= LOOKUP_CONTINUE; > return permission(dir,MAY_WRITE | MAY_EXEC, nd); > } > > -- Stephen Smalley National Security Agency - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists