[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <Line.LNX.4.64.0703231441390.30602@d.namei>
Date: Fri, 23 Mar 2007 14:46:48 -0400 (EDT)
From: James Morris <jmorris@...ei.org>
To: Eric Paris <eparis@...isplace.org>
cc: Joy Latten <latten@...tin.ibm.com>,
David Miller <davem@...emloft.net>, selinux@...ho.nsa.gov,
netdev@...r.kernel.org, vyekkirala@...stedCS.com
Subject: Re: [PATCH]: Add security check before flushing SAD/SPD
On Fri, 23 Mar 2007, Eric Paris wrote:
> Maybe I'm way out on a limb here but if I am a regular user and I say
> rm /tmp/* and I only have permissions to delete some of the files I
> expect just those couple to be delete, not the whole operation denied.
I don't think this analogy holds up, as rm is a per-file deletion
operation, and it is the shell which expands the wildcard for you.
A 'flush' has a semantic implication that all entries will be removed, and
it should be atomic and either succeed or fail at that granularity.
- James
--
James Morris
<jmorris@...ei.org>
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists