Re: [PATCH] Extended Attributes for Security Modules against 2.5.68

From: Christoph Hellwig (hchat_private)
Date: Wed Apr 23 2003 - 11:45:01 PDT

  • Next message: Andreas Dilger: "Re: [PATCH] Extended Attributes for Security Modules against 2.5.68"

    On Wed, Apr 23, 2003 at 11:25:49AM -0700, Chris Wright wrote:
    > It's really a namespace issue for user apps trying to deal with xattrs.
    
    Yes.
    
    > Being able to display the xattrs associated with a file in sane way,
    > like getxattr(path, "system.security", ...).  Otherwise something like
    > listxattr() then gettxttr(... "system.security.[blah]" ...).  Total
    > freeform naming is a headache for userspace to deal with.  Esp. since we
    > don't want to teach all userland tools about each individual module/policy.
    
    Randomly userland shouldn't deal with these xattrs.  Remember you are
    talking about the ondisk represenation of your labelling - nothing
    but the labelling tools should ever touch it.
    
    > There were a couple proposals to use common root like "system.security."
    > (or the trusted namespace which was discussed in earlier threads).
    > 
    > Would you still prefer module specific naming?
    
    Personally I give a damn about the actual naming.  Just make sure
    that each name has a unique meaning associated with it.
    
    _______________________________________________
    linux-security-module mailing list
    linux-security-moduleat_private
    http://mail.wirex.com/mailman/listinfo/linux-security-module
    



    This archive was generated by hypermail 2b30 : Wed Apr 23 2003 - 11:45:15 PDT