Hi, all
Really new to fs area ;) I'm trying to port Umbrella project based on linux-2.6.11,
which implementing Process-Based Access Control (PBAC) to linux-2.6.34.
The key of Umbrella project is to restrict process access from some directory/files,
these restriction can be fetched from /proc/umbrella. First the directory/file path is
parsed from struct dentry, then every inode operation finally has to be checked against
the restrictions with current accessed path involved. This basically how it works.
In linux-2.6.11, struct dentry is used by nd->dentry.
int permission(struct inode *inode, int mask, struct nameidata *nd)
-> security_inode_permission
-> security_ops->inode_permission
But in linux-2.6.34, struct nameidata is not used any more, how can I get proper struct
dentry from inode?
int inode_permission(struct inode *inode, int mask)
-> security_inode_permission
-> security_ops->inode_permission
Thanks in advance.
--
八百里秦川尘土飞扬,三千万老陕齐吼秦腔。
--bill
--
To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
