Messages in this thread | | | Date | Tue, 22 Sep 2009 09:56:12 -0400 | From | Christoph Hellwig <> | Subject | Re: [PATCH] vfs: new FROM_ACCESS flag |
| |
On Sun, Sep 20, 2009 at 09:30:48PM -0400, Eric Paris wrote: > This new acc_mode flag is just to tell the security system this inode > permission check is from the access system call. The security system can > use this information as it finds appropriete. In particular SELinux plans to > use this flag to alter what we choose to audit and what we do not choose to > audit.
I think you're better off splitting the existing MAY_ACCESS flag and only using MAY_ACCESS for calles from access() insteaf of introducing a FROM_ACCESS flag and causing lots of naming confusion.
| |