Re: [PATCH] permission hook in filemap_nopage

Previous message: Valdis.Kletnieksat_private: "Re: [PATCH] extended attribute support"
Maybe in reply to: Antony Edwards: "[PATCH] permission hook in filemap_nopage"
Next in thread: Antony Edwards: "Re: [PATCH] permission hook in filemap_nopage"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

aedwardat_private

> I think you should hook in do_no_page, since the ->nopage
> callback could be something other than filemap_nopage.

I thought about that, but only wanted to check access to files (for
consistency with
read(2)/write(2)). The semantics of this seem pretty (to me) -- but for
shared
memory I'm not sure. The process can still receive data from other
processes
without going through do_no_page -- so checking just because the page got
swapped out doesn't appear to useful.

Comments?

Antony

_______________________________________________
linux-security-module mailing list
linux-security-moduleat_private
http://mail.wirex.com/mailman/listinfo/linux-security-module