RE: quotactl hook

Previous message: Lachlan McIlroy: "RE: [patch] IPC/Message Queues"
In reply to: Stephen Smalley: "Re: quotactl hook"
Next in thread: Lachlan McIlroy: "RE: quotactl hook"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

lachlanat_private

> -----Original Message-----
> From: Stephen Smalley [mailto:sdsat_private]
> Sent: Monday, August 27, 2001 11:57 PM
> To: Lachlan McIlroy
> Cc: linux-security-moduleat_private
> Subject: Re: quotactl hook
> 
> 
> 
> On Mon, 27 Aug 2001, Lachlan McIlroy wrote:
> 
> > Attached is a patch to add a hook to the quotactl()
> > system call.  The hook has been made authoritative as
> > that seems to be the direction that LSM is heading.  Any
> > feedback/opinions/comments would be greatly appreciated...
> 
> Why not pass the 'id' parameter as well, so that the module
> can perform access control on the particular user or group
> identity?  Also, why not pass the 'sb' parameter (although
> the module would need to be careful, because it may be NULL)
> so that the module can perform access control based on
> the particular file system?  Finally, it would be nice to
> also have a hook in quota_on after the filp_open so that
> the module can control what files are used as quota files.

Thanks for the suggestion, I'll make the changes...

> 
> --
> Stephen D. Smalley, NAI Labs
> ssmalleyat_private
> 
> 
> 
> 
> 
> 

---
Lachlan McIlroy                    Phone: +61 3 9596 4155
Trusted Linux                        Fax: +61 3 9596 2960
Adacel Technologies Ltd                    www.adacel.com

_______________________________________________
linux-security-module mailing list
linux-security-moduleat_private
http://mail.wirex.com/mailman/listinfo/linux-security-module