Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]

Stephen Smalley <[email protected]> wrote:

> It is just a way of carving up the permission space, typically based on
> object type, but it can essentially be arbitrary.  The check in this
> case seems specific to cachefiles since it is controlling an operation
> on the /dev/cachefiles interface that only applies to cachefiles
> internal operations, so making a cachefiles class seems reasonable.

Can you specify what sort of permissions you're thinking of providing for
tasks to operate on this class?  Can an object of this class 'operate' on
other objects, or can only process-class objects do that?

How does an object of this class acquire a label?  What is an object of this
class?  Is it a "cache"?  Or were you thinking of a "module"?

David
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

---

• Follow-Ups:
  • Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]
    • From: David Howells <[email protected]>
  • Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]
    • From: Stephen Smalley <[email protected]>

• References:
  • Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]
    • From: Stephen Smalley <[email protected]>
  • Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]
    • From: Stephen Smalley <[email protected]>
  • Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]
    • From: Stephen Smalley <[email protected]>
  • Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]
    • From: Casey Schaufler <[email protected]>
  • Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]
    • From: David Howells <[email protected]>
  • Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]
    • From: David Howells <[email protected]>

• Prev by Date: Re: 2.6.22-stable causes oomkiller to be invoked
• Next by Date: Re: [PATCH] kexec: force x86_64 arches to boot kdump kernels on boot cpu
• Previous by thread: Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]
• Next by thread: Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]
• Index(es):
  • Date
  • Thread

[Index of Archives]     [Kernel Newbies]     [Netfilter]     [Bugtraq]     [Photo]     [Stuff]     [Gimp]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Video 4 Linux]     [Linux for the blind]     [Linux Resources]