Re: [RFC 0/2] getsecurity/vfs_getxattr cleanup

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Any comments on these patches? I know Casey voiced some concerns about
them the first time I posted them but I believe I have adequately
addressed them.

Dave

On Mon, 2007-10-22 at 15:06 -0400, David P. Quigley wrote:
> This patch series addresses two concerns. Currently when a developer
> wishes to obtain a security blob from the LSM he/she has to guess at the
> length of the blob being returned. We modify security_inode_getsecurity
> to return an appropriately sized buffer populated with the security
> information and the length of that buffer. This is similar to the
> approach taken by Al Viro for the security_getprocattr hook. 
> 
> The second concern that this patch set addresses is that vfs_getxattr
> reads the security xattr using inode_getxattr and then proceeds to
> clobber it with a subsequent call to the LSM. This is fixed by
> reordering vfs_getxattr.
> 
> The series applies on top of 2.6.23 aka git hash
> bbf25010f1a6b761914430f5fca081ec8c7accd1
> 
> -
> To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
> the body of a message to majordomo@xxxxxxxxxxxxxxx
> More majordomo info at  http://vger.kernel.org/majordomo-info.html

-
To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Ext4 Filesystem]     [Union Filesystem]     [Filesystem Testing]     [Ceph Users]     [Ecryptfs]     [AutoFS]     [Kernel Newbies]     [Share Photos]     [Security]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux Cachefs]     [Reiser Filesystem]     [Linux RAID]     [Samba]     [Device Mapper]     [CEPH Development]
  Powered by Linux