Re: Kernel Security Extensions USENIX BOF Summary

From: Greg KH (gregat_private)
Date: Thu Jul 05 2001 - 14:16:08 PDT

  • Next message: Valdis.Kletnieksat_private: "Re: LSM Patch Additions for CAPP (C2) Audit Trails"

    On Thu, Jul 05, 2001 at 05:07:49PM -0400, jmjonesat_private wrote:
    > 
    > Only one question: what if you WANT to reconstruct pathname data... not
    > just absolute, but also what was originally specified.  Is that
    > possible with strictly inode-based protections, and, if not, is there a 
    > SIMPLE way to add it to the LSM model without getting into "mixed models"?
    
    An inode can point to any number of valid paths to that file.  Think of
    multiple mounts of a filesystem at different places in the tree.
    (Hm, let's mount /dev/hdd8 at /etc, /tmp/etc, /var/etc, and
    /home/foo/etc )
    So reconstruction the original path from a inode is almost impossible.
    
    Also remember per-user namespaces :)
    
    Did that answer your question?
    
    greg k-h
    
    _______________________________________________
    linux-security-module mailing list
    linux-security-moduleat_private
    http://mail.wirex.com/mailman/listinfo/linux-security-module
    



    This archive was generated by hypermail 2b30 : Thu Jul 05 2001 - 14:18:19 PDT