linux-kernel - Re: [RFC][PATCH 1/1] support optional non-VFS capability inheritance without disabling file caps

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <27938.1250604432@redhat.com>
Date:	Tue, 18 Aug 2009 15:07:12 +0100
From:	David Howells <dhowells@...hat.com>
To:	"Serge E. Hallyn" <serue@...ibm.com>
Cc:	dhowells@...hat.com, Will Drewry <redpig@...aspill.org>,
	linux-kernel@...r.kernel.org, James Morris <jmorris@...ei.org>,
	linux-security-module@...r.kernel.org, morgan@...nel.org
Subject: Re: [RFC][PATCH 1/1] support optional non-VFS capability inheritance without disabling file caps

Serge E. Hallyn <serue@...ibm.com> wrote:

> Heck, maybe we can use the fscache or a stackable fs to provide a view
> of a non-xattr fs with xattrs layered on top.  David Howells, does
> that sound doable or would that be an abuse?

You could use fscache, but you would have to deal with the cache not being
available or suddenly going away.  Note that fscache does not stack on top of
another fs in Linux in the way it does in Solaris - the non-xattr fs would
have to actively talk to fscache.  But it's certainly possible.

David
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/