Re: [PATCH v2 00/30] acl: add vfs posix acl api

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Sep 26, 2022 at 05:22:45PM -0700, Casey Schaufler wrote:
> I suggest that you might focus on the acl/evm interface rather than the entire
> LSM interface. Unless there's a serious plan to make ima/evm into a proper LSM
> I don't see how the breadth of this patch set is appropriate.

Umm. The problem is the historically the Linux xattr interface was
intended for unstructured data, while some of it is very much structured
and requires interpretation by the VFS and associated entities.  So
splitting these out and add proper interface is absolutely the right
thing to do and long overdue (also for other thing like capabilities).
It might make things a little more verbose for LSM, but it fixes a very
real problem.



[Index of Archives]     [Linux Ext4 Filesystem]     [Union Filesystem]     [Filesystem Testing]     [Ceph Users]     [Ecryptfs]     [NTFS 3]     [AutoFS]     [Kernel Newbies]     [Share Photos]     [Security]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux Cachefs]     [Reiser Filesystem]     [Linux RAID]     [NTFS 3]     [Samba]     [Device Mapper]     [CEPH Development]

  Powered by Linux