BSD Secure Levels Update: claim block dev in file struct rather than inode struct [3/8]

• Previous message: Michael Halcrow: "BSD Secure Levels Update: suid/sgid on directories; open/mknod issue [2/8]"
• In reply to: Michael Halcrow: "BSD Secure Levels Update: suid/sgid on directories; open/mknod issue [2/8]"
• Next in thread: Michael Halcrow: "BSD Secure Levels Update: memory alloc failure check [4/8]"
• Reply: Michael Halcrow: "BSD Secure Levels Update: memory alloc failure check [4/8]"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This is the third in a series of eight patches to the BSD Secure
Levels LSM.  It moves the claim on the block device from the inode
struct to the file struct in order to address a potential
circumvention of the control via hard links to block devices.  Thanks
to Serge Hallyn for pointing this out.

Signed off by: Michael Halcrow <mhalcrow@private>

• text/plain attachment: seclvl_bd_claim.patch

• Previous message: Michael Halcrow: "BSD Secure Levels Update: suid/sgid on directories; open/mknod issue [2/8]"
• In reply to: Michael Halcrow: "BSD Secure Levels Update: suid/sgid on directories; open/mknod issue [2/8]"
• Next in thread: Michael Halcrow: "BSD Secure Levels Update: memory alloc failure check [4/8]"
• Reply: Michael Halcrow: "BSD Secure Levels Update: memory alloc failure check [4/8]"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.3 : Thu Feb 03 2005 - 15:40:06 PST