> On May 15, 2019, at 4:00 AM, Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx> wrote: > >> On Wed, May 15, 2019 at 01:35:31PM +0300, Jarkko Sakkinen wrote: >> This brings me to an open question in Andy's model: lets say that we >> change the source for SIGSTRUCT from memory address to fd. How can the >> policy prevent the use not creating a file containing a SIGSTRUCT and >> passing fd of that to the EINIT ioctl? > The policy will presumably check the label on the file that the fd points to. > Also wondering if a path would be better than plain fd for defining a > reasonable policy i.e. have sigstruct_path as part of the ioctl > parameters and not sigstruct_fd. > It would save two syscalls at the cost of a decent amount of complexity.
