Re: [PATCH] Hooks for capget, capset

From: Greg KH (gregat_private)
Date: Thu Aug 16 2001 - 23:31:02 PDT

  • Next message: Greg KH: "How to get the most recent version of the LSM patch"

    On Tue, Aug 14, 2001 at 10:45:43AM -0400, Stephen Smalley wrote:
    > The attached patch (relative to my previous patch that fixed
    > some bugs in the security_ops->capable/cap_capable calls) implements
    > hooks for the capget and capset calls.  I left as much as possible of the
    > functional logic in those calls untouched, only moving code that
    > examines or modifies the capability bits and code that performs
    > capability-specific authorization checks.  Two hooks were
    > defined for capset - the capset_check hook replaces the 
    > authorization checks, and the capset_set hook performs the
    > actual setting of the capability bits for a particular task.
    I like this patch.
    Does anyone else have an opinion on it (or is everyone off partying at
    USENIX right now?)
    greg k-h
    linux-security-module mailing list

    This archive was generated by hypermail 2b30 : Thu Aug 16 2001 - 23:34:43 PDT