Messages in this thread | | | Subject | Re: [PATCH] Smack: fix domain transfer issues | From | Stephen Smalley <> | Date | Thu, 29 Sep 2011 09:20:36 -0400 |
| |
On Thu, 2011-09-29 at 11:26 +0300, Jarkko Sakkinen wrote: > MNT_NOSUID should be checked.
Doubtful, as Smack and capabilities are completely orthogonal, right? Even for SELinux, the nosuid check is a bit of a nuisance.
> Also, I'll plan to > implement permission check for ptrace but in the > scope of this patch.
Still no transition or entrypoint checks, open file revalidation, parent death signal clearing, ...?
-- Stephen Smalley National Security Agency
| |