linux-kernel - Re: [PATCH] 2.6.38: access permission filesystem 0.25

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <87zknw8qh5.fsf@rat.lan>
Date:	Mon, 11 Apr 2011 22:47:50 +0200
From:	Olaf Dietsche <olaf+list.linux-kernel@...fdietsche.de>
To:	Randy Dunlap <randy.dunlap@...cle.com>
Cc:	linux-kernel@...r.kernel.org, Rod Cordova <rcordova@...ernet.org>
Subject: Re: [PATCH] 2.6.38: access permission filesystem 0.25

Randy Dunlap <randy.dunlap@...cle.com> writes:

> +config ACCESSFS_USER_PORTS
> +	tristate "User permission based IP ports"
> +	depends on ACCESS_FS
> +	select NET_HOOKS
> +	default n
> +	help
> +	  If you say Y here, you will be able to control access to IP ports
> +	  based on user-/groupid. For this to work, you must say Y
> +	  to CONFIG_NET_HOOKS.
>
> That last sentence is handled (in theory) by "select NET_HOOKS", right?
>
> But NET_HOOKS depends on INET && EXPERIMENTAL, so this config should not
> select NET_HOOKS unless INET && EXPERIMENTAL are enabled also.

Thanks for spotting this. Fixed version is below and at 

<http://www.olafdietsche.de/linux/accessfs/>

Regards, Olaf

 Documentation/filesystems/accessfs.txt |   41 +++
 fs/Kconfig                             |    1 +
 fs/Makefile                            |    1 +
 fs/accessfs/Kconfig                    |   63 +++++
 fs/accessfs/Makefile                   |   11 +
 fs/accessfs/capabilities.c             |  108 ++++++++
 fs/accessfs/inode.c                    |  432 ++++++++++++++++++++++++++++++++
 fs/accessfs/ip.c                       |  101 ++++++++
 include/linux/accessfs_fs.h            |   42 +++
 include/net/sock.h                     |   43 ++++
 net/Kconfig                            |   12 +
 net/Makefile                           |    1 +
 net/hooks.c                            |   55 ++++
 net/ipv4/af_inet.c                     |    2 +-
 net/ipv6/af_inet6.c                    |    2 +-
 15 files changed, 913 insertions(+), 2 deletions(-)


View attachment "accessfs-2.6.38-0.25.patch" of type "text/x-diff" (27251 bytes)