Re: graft_tree/attach_mnt rfc

Previous message: sdsat_private: "[patch] Base set of LSM hooks for SysV IPC"
In reply to: Serge E. Hallyn: "Re: graft_tree/attach_mnt rfc"
Next in thread: Chris Wright: "Re: graft_tree/attach_mnt rfc"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

mike_wrayat_private

----- Original Message -----
From: Serge E. Hallyn <hallynat_private>
To: Mike Wray <mike_wrayat_private>
Cc: <linux-security-moduleat_private>
Sent: 04 October 2002 10:45
Subject: Re: graft_tree/attach_mnt rfc

> > This is a problem for us because our present code for handling a mount
involves
> > looking up filenames,
>
> As does that for DTE - you can implement the first part of path_lookup
> yourself in a safe way (use dget_locked), then call link_path_walk,
> which expects the spinlock (and releases it, using unlock_nd).
>

That would be OK if all our code was in the kernel -
but we have a user-space daemon that does the heavy-duty
file lookups so kernel workrounds don't really help.

Mike

_______________________________________________
linux-security-module mailing list
linux-security-moduleat_private
http://mail.wirex.com/mailman/listinfo/linux-security-module