lkml.org 
[lkml]   [2014]   [Nov]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: [PATCH 2/7] Overlayfs: Use copy-up security hooks
Date
On Friday, November 07, 2014 10:05:40 PM David Howells wrote:
> Paul Moore <paul@paul-moore.com> wrote:
> > So the LSM must modify the xattr in place? I suppose that since the
> > @value is allocated to the max size it shouldn't be a problem. Just
> > checking ...
>
> ... And the caller must provide a maximally sized buffer (which it likely
> has to allocate anyway).
>
> I'm not sure I really need to provide the modification thing. I suspect a
> binary keep or discard decision is sufficient.

The docker use case we've been talking about in this thread doesn't really
care about the on-disk file labels (xattrs) because the docker folks want to
use context= mounts; however if someone did care about on-disk file labels for
the upper layer in the overlayfs then they might want to modify the xattr.

--
paul moore
www.paul-moore.com



\
 
 \ /
  Last update: 2014-11-10 17:01    [W:0.086 / U:0.028 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site