Re: [PATCHv4 2/2] fuse: Call security hooks on new inodes

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Jul 21, 2020 at 10:07 AM Chirantan Ekbote
<chirantan@xxxxxxxxxxxx> wrote:
>
> On Mon, Jul 13, 2020 at 6:57 PM Chirantan Ekbote <chirantan@xxxxxxxxxxxx> wrote:
> >
> > Add a new `init_security` field to `fuse_conn` that controls whether we
> > initialize security when a new inode is created.  Set this to true when
> > the `flags` field of the fuse_init_out struct contains
> > FUSE_SECURITY_CTX.
> >
> > When set to true, get the security context for a newly created inode via
> > `security_dentry_init_security` and append it to the create, mkdir,
> > mknod, and symlink requests.
> >
>
> Are there any other concerns with this patch? Or can I expect that it
> will get merged eventually?

Looks good to me.  Can you resend with the security/selinux folks in the CC?

Thanks,
Miklos



[Index of Archives]     [Linux Ext4 Filesystem]     [Union Filesystem]     [Filesystem Testing]     [Ceph Users]     [Ecryptfs]     [AutoFS]     [Kernel Newbies]     [Share Photos]     [Security]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux Cachefs]     [Reiser Filesystem]     [Linux RAID]     [Samba]     [Device Mapper]     [CEPH Development]

  Powered by Linux