Re: vfs_permissions: DACs

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Eugene Teo (eugene.teo@eugeneteo.net) wrote:
> 175     /*
> 176      * If the DACs are ok we don't need any capability check.
> 177      */
> 178     if (((mode & mask & (MAY_READ|MAY_WRITE|MAY_EXEC)) == mask))
> 179         return 0;
> 180 
> 181     /*
> 182      * Read/write DACs are always overridable.
> 183      * Executable DACs are overridable if at least one exec bit is set.
> 184      */
> 185     if ((mask & (MAY_READ|MAY_WRITE)) || (inode->i_mode & S_IXUGO))
> 186         if (capable(CAP_DAC_OVERRIDE))
> 187 return 0;
> 
> in fs/namei.c
> 
> any idea what DACs are?

DAC == Discretionary Access Control
I think a search on google will help you :-)

-- 
Cordialement/Regards
+--------------------------------------------------+
| Christophe Lucas -- IOMEDA SA (clucas@iomeda.fr) |
| Developpeur/Administrateur GNU/Linux             |
+--------------------------------------------------+
| http://titux.tuxfamily.org                       |
+--------------------------------------------------+
--
Kernelnewbies: Help each other learn about the Linux kernel.
Archive:       http://mail.nl.linux.org/kernelnewbies/
FAQ:           http://kernelnewbies.org/faq/



[Index of Archives]     [Newbies FAQ]     [Linux Kernel Mentors]     [Linux Kernel Development]     [IETF Annouce]     [Git]     [Networking]     [Security]     [Bugtraq]     [Yosemite]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux SCSI]     [Linux ACPI]
  Powered by Linux