Re: [PATCH] Extended Attributes for Security Modules against 2.5.68

Previous message: Stephen Smalley: "[PATCH] Extended Attributes for Security Modules against 2.5.68"
In reply to: Stephen Smalley: "[PATCH] Extended Attributes for Security Modules against 2.5.68"
Next in thread: Chris Wright: "Re: [PATCH] Extended Attributes for Security Modules against 2.5.68"
Reply: Chris Wright: "Re: [PATCH] Extended Attributes for Security Modules against 2.5.68"
Reply: Stephen Smalley: "Re: [PATCH] Extended Attributes for Security Modules against 2.5.68"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

hchat_private

On Wed, Apr 23, 2003 at 01:52:03PM -0400, Stephen Smalley wrote:
> This patch against 2.5.68 implements changes to the LSM xattr-related
> hooks and adds xattr handlers for ext[23] to support the use of extended
> attributes by security modules for storing file security labels, as
> described in my April 8th RFC posting.  Please apply, or let me know if
> any changes are needed.  Thanks.

First, please put the changes in the LSM API in a different patch from
the xattr changes, they're a different issue.

The other question is why do you name them system.security?  The name
sounds a bit too generic to me.  ACLs are certainly a security feature
and have different ATTRS, similar for the Posix capability and MAC
support in XFS.  As selinux is the flask implementation for Linux
what about system.flask_label?  (or system.selinux_label?)

_______________________________________________
linux-security-module mailing list
linux-security-moduleat_private
http://mail.wirex.com/mailman/listinfo/linux-security-module