lkml.org 
[lkml]   [2018]   [Apr]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    SubjectRe: [PATCH 04/24] VFS: Add LSM hooks for filesystem context [ver #7]
    Date
    Paul Moore <paul@paul-moore.com> wrote:

    > Adding the SELinux mailing list to the CC line; in the future please
    > include the SELinux mailing list on patches like this. It would also
    > be very helpful to include "selinux" somewhere in the subject line
    > when the patch is predominately SELinux related (much like you did for
    > the other LSMs in this patchset).

    I should probably evict the SELinux bits into their own patch since the point
    of this patch is the LSM hooks, not specifically SELinux's implementation
    thereof.

    > I can't say I've digested all of this yet, but what SELinux testing
    > have you done with this patchset?

    Using the fsopen()/fsmount() syscalls, these hooks will be made use of, say
    for NFS (which I haven't included in this list). Even sys_mount() will make
    use of them a bit, so just booting the system does that.

    Note that for SELinux these hooks don't change very much except how the
    parameters are handled. It doesn't actually change the checks that are made -
    at least, not yet. There are some additional syscalls under consideration
    (such as the ability to pick a live mounted filesystem into a context) that
    might require additional permits.

    David

    \
     
     \ /
      Last update: 2018-04-20 17:35    [W:2.303 / U:0.068 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site