Messages in this thread | | | Date | Thu, 21 Jun 2007 19:59:55 +0200 | From | Pavel Machek <> | Subject | Re: [AppArmor 39/45] AppArmor: Profile loading and manipulation, pathname matching |
| |
On Thu 2007-06-21 18:01:05, Andreas Gruenbacher wrote: > On Saturday 16 June 2007 01:49, Greg KH wrote: > > But for those types of models that do not map well to internal kernel > > structures, perhaps they should be modeled on top of a security system that > > does handle the internal kernel representation of things in the way the > > kernel works. > > How exactly are struct vfsmount and struct dentry not in-kernel structures?
That's what greg is talking about, AFAICT. Normal kernel code uses struct vfsmount + struct dentry.
AA uses... guess what... char pathname[HUGE_VALUE]. Pavel -- (english) http://www.livejournal.com/~pavelmachek (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |