Sorry for late reply, the mail skiped the inbox and to the lkml label directly of gmail. On Fri, Oct 28, 2011 at 7:47 AM, James Morris <jmorris@xxxxxxxxx> wrote: > On Thu, 27 Oct 2011, James Morris wrote: > >> On Tue, 25 Oct 2011, Zhou Peng wrote: >> >> > Hi, how about this patch pls? >> >> I'm not convinced that this is a necessary feature for the mainline >> kernel. > > It also needs more review, from at least other security folk, and ideally > also from fs/vfs folk. Thank you James. I cc to Alexander Viro (VFS), Chris Wright (LSM), Hugh Dickins (TMPFS), Stephen Smalley (SELINUX), Kentaro Takeda, Tetsuo Handa (TOMOYO), John Johansen (APPARMOR) Hope any review > Why does NFSARK want this supportr? Are its users asking for it? (I > couldn't find the distro, btw). Yes, it's user asks for acl for ipc, It is a distro by nfschina. >> >> > >> > On Fri, Oct 21, 2011 at 6:46 PM, Zhou Peng <ailvpeng25@xxxxxxxxx> wrote: >> > > * In general, it can give a more fine grained and flexible DAC to msg queue obj. >> > > * NFSARK(A distro) wants all posix ipc objects to support ACL, including mqueue. >> > > * Posix semphore and shmem both support ACL, but mqueue as one of the >> > > three basic ipc doesn't. >> > > * At least, it may save one note sentence for MQ_OVERVIEW(7) ^_^ >> > > "Linux does not currently (2.6.26) support the use of access >> > > control lists (ACLs) for POSIX message queues." >> > > http://www.kernel.org/doc/man-pages/online/pages/man7/mq_overview.7.html >> > > >> > > On Thu, Oct 20, 2011 at 11:33 PM, James Morris <jmorris@xxxxxxxxx> wrote: >> > > > On Thu, 20 Oct 2011, Zhou Peng wrote: >> > > > >> > > >> This patch adds ACL supports to mqueue filesystem. >> > > >> Based on Linux 3.0.4. >> > > > >> > > > Why is this necessary, and who is planning to use it? >> > > > >> > > > Are any distros likely to enable this? -- Zhou Peng -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
