Re: path_post_lookup

From: Valdis.Kletnieksat_private
Date: Tue Sep 02 2003 - 19:38:08 PDT

  • Next message: dl1bkeat_private: "Re: Wicked screensaver"

    On Tue, 02 Sep 2003 18:54:31 EDT, Charles Levert said:
    
    > Here is what I am trying to do.  Let d be a reference directory that
    > is an open file of the current process (i.e., it has a file descriptor
    > assigned to it).  Let f be the file that the user is trying to open
    > (or an executable that he's trying to execute) after all symlinks have
    > been traversed.  The open is allowed to succeed if f is in the subtree
    > of files specified by d.  E.g.,
    > 
    > 	d=/a/b	f=/a/b/c/d	succeeds
    > 	d=/a/b	f=/a/e/f	fails
    > 
    > For this, I need to be able to walk the tree from f to the root and if
    > I pass by d in doing so, then the open succeeds.
    
    And how is this better than just doing a 'chroot("/a/b");'?  
    
    
    

    _______________________________________________ linux-security-module mailing list linux-security-moduleat_private http://mail.wirex.com/mailman/listinfo/linux-security-module



    This archive was generated by hypermail 2b30 : Tue Sep 02 2003 - 19:39:38 PDT