[lkml]   [2018]   [Feb]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [PATCH bpf-next v8 01/11] fs,security: Add a security blob to nameidata
On Tue, Feb 27, 2018 at 01:41:11AM +0100, Mickaël Salaün wrote:
> The function current_nameidata_security(struct inode *) can be used to
> retrieve a blob's pointer address tied to the inode being walk through.
> This enable to follow a path lookup and know where an inode access come
> from. This is needed for the Landlock LSM to be able to restrict access
> to file path.
> The LSM hook nameidata_free_security(struct inode *) is called before
> freeing the associated nameidata.

NAK. Not without well-defined semantics and "some Linux S&M uses that for
something, don't ask what" does not count.

 \ /
  Last update: 2018-02-27 01:58    [W:0.171 / U:2.636 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site