Re: quotactl hook

Previous message: Chris Wright: "Re: Common header for security blobs"
In reply to: Greg KH: "Re: quotactl hook"
Next in thread: Greg KH: "Re: quotactl hook"
Next in thread: Stephen Smalley: "Re: quotactl hook"
Reply: Greg KH: "Re: quotactl hook"
Reply: Lachlan McIlroy: "RE: quotactl hook"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

chrisat_private

* Greg KH (gregat_private) wrote:
> On Thu, Sep 06, 2001 at 11:07:45AM -0700, Chris Wright wrote:
> > 
> > p.s. in fact i see no good reason not to move the lsm umount hook to
> > sys_umount.  that way it is not within the BKL.  any objections?
> 
> You need it there for the change_root call.

are you sure?  before lsm, there was no security check in the
change_root/do_umount code path.  isn't that just used when switching
from your initrd to the real root device during bootup?  this is
getting close to a secure boot sequence ;-)

-chris

_______________________________________________
linux-security-module mailing list
linux-security-moduleat_private
http://mail.wirex.com/mailman/listinfo/linux-security-module