Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]

On Mon, 2007-12-10 at 17:07 +0000, David Howells wrote:
> Stephen Smalley <[email protected]> wrote:
> 
> > > +	tsec->create_sid = SECINITSID_UNLABELED;
> > > +	tsec->keycreate_sid = SECINITSID_UNLABELED;
> > > +	tsec->sockcreate_sid = SECINITSID_UNLABELED;
> 
> Cleared means what?  Setting to 0?  Or is there some other constant I should
> use for that?

Yes, setting to 0.

Otherwise, only other issue I have with this interface is it won't
generalize to dealing with nfsd, where we want to set the acting context
to a context we obtain from or determine based upon the client.

Why can't cachefilesd just push a context into the kernel and pass that
into the hook as the acting context, and then nfsd can do likewise using
the context provided by the client or obtained locally from exports for
ordinary clients?  Avoids the transition SID computation altogether
within the kernel and makes this more generic.

-- 
Stephen Smalley
National Security Agency

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

---

• References:
  • Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]
    • From: Stephen Smalley <[email protected]>
  • [PATCH 00/28] Permit filesystem local caching [try #2]
    • From: David Howells <[email protected]>
  • [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]
    • From: David Howells <[email protected]>
  • Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]
    • From: David Howells <[email protected]>

• Prev by Date: Re: 2.6.22.14 oops msg with commvault galaxy ?
• Next by Date: "ip neigh show" not showing arp cache entries?
• Previous by thread: Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]
• Next by thread: Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]
• Index(es):
  • Date
  • Thread

[Index of Archives]     [Kernel Newbies]     [Netfilter]     [Bugtraq]     [Photo]     [Stuff]     [Gimp]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Video 4 Linux]     [Linux for the blind]     [Linux Resources]