Re: [PATCH] Change LSM hooks in setxattr 2.5.69

Previous message: viroat_private: "Re: [PATCH] Process Attribute API for Security Modules 2.5.69"
In reply to: Stephen Smalley: "[PATCH] Change LSM hooks in setxattr 2.5.69"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

viroat_private

On Tue, May 06, 2003 at 12:21:05PM -0400, Stephen Smalley wrote:
> This patch against 2.5.69 adds a security_inode_post_setxattr hook so
> that security modules can update the inode security structure after a
> successful setxattr, and it moves the existing security_inode_setxattr
> hook call after the taking the inode semaphore so that atomicity is
> provided for the security check and the update to the inode security
> structure.  Al, if you approve of this change, please acknowledge.  If
> not, please advise as to what must change.  Thanks. 

<shrug> no objections, provided that existing code behind that hook doesn't
do anything that could deadlock under ->i_sem.  Seeing that it's your code...
_______________________________________________
linux-security-module mailing list
linux-security-moduleat_private
http://mail.wirex.com/mailman/listinfo/linux-security-module