Re: [RFC][PATCH] Remove security_inode_post_create/mkdir/symlink/mknod hooks

• Previous message: Casey Schaufler: "Re: [RFC][PATCH] Generic fallback for security xattrs"
• Maybe in reply to: Chris Wright: "Re: [RFC][PATCH] Remove security_inode_post_create/mkdir/symlink/mknod hooks"
• Next in thread: Stephen Smalley: "Re: [RFC][PATCH] Remove security_inode_post_create/mkdir/symlink/mknod hooks"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

* John Johansen (johansen@private) wrote:
> The new inode_init_security hook doesn't receive the dentry information
> that the inode_post_create/mkdir/mknod/symlink LSM hooks receive.  This is a
> problem for subdomain because we rely on dentry information.

Any specifics?  I like the cleanup this does.

> also the inode_init_security hook forces labeling through xattrs, where the
> inode_post_create/mkdir/mknod/symlink hooks all labeling through files, which
> allows for fallback support on filesystem that don't support xattrs.
> Of course it looks like this issue might go away with the the Generic fallback
> patch that was posted this morning (sorry I haven't had time todo anything
> more than skim it).

It should, it simply does a callback for labelling the inode (in-core)
when there's no support for storing on-disk.

thanks,
-chris

• Previous message: Casey Schaufler: "Re: [RFC][PATCH] Generic fallback for security xattrs"
• Maybe in reply to: Chris Wright: "Re: [RFC][PATCH] Remove security_inode_post_create/mkdir/symlink/mknod hooks"
• Next in thread: Stephen Smalley: "Re: [RFC][PATCH] Remove security_inode_post_create/mkdir/symlink/mknod hooks"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.3 : Fri Jul 15 2005 - 13:24:33 PDT