linux-kernel - Re: [PATCH 10/32] tomoyo: Implement security hooks for the new mount API [ver #9]

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Wed, 11 Jul 2018 08:34:19 +0900
From:   Tetsuo Handa <penguin-kernel@...ove.sakura.ne.jp>
To:     David Howells <dhowells@...hat.com>
Cc:     viro@...iv.linux.org.uk, linux-kernel@...r.kernel.org,
        dhowells@...hat.com, linux-fsdevel@...r.kernel.org,
        linux-security-module@...r.kernel.org,
        tomoyo-dev-en@...ts.sourceforge.jp, torvalds@...ux-foundation.org
Subject: Re: [PATCH 10/32] tomoyo: Implement security hooks for the new mount API
 [ver #9]

David Howells wrote:
> Implement the security hook to check the creation of a new mountpoint for
> Tomoyo.
> 
> As far as I can tell, Tomoyo doesn't make use of the mount data or parse
> any mount options, so I haven't implemented any of the fs_context hooks for
> it.
> 
> Signed-off-by: David Howells <dhowells@...hat.com>
> cc: Tetsuo Handa <penguin-kernel@...ove.SAKURA.ne.jp>
> cc: tomoyo-dev-en@...ts.sourceforge.jp
> cc: linux-security-module@...r.kernel.org
> 

Would you provide examples of each possible combination as a C program?
For example, if one mount point from multiple sources with different
options are possible, please describe such pattern using syscall so that
LSM modules can run it to see whether they are working as expected.