Re: [RFC][PATCH] selinux: use default proc sid on symlinks

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 22 Sep 2008, Stephen Smalley wrote:

> Patch below for the recent /proc/net bug related to selinux thread on linux-kernel.
> If this looks sane, then possibly it should be re-sent on that thread.
> 
> As we are not concerned with fine-grained control over reading of
> symlinks in proc, always use the default proc SID for all proc symlinks.
> This should help avoid permission issues upon changes to the proc tree
> as in the /proc/net -> /proc/self/net example.
> This does not alter labeling of symlinks within /proc/pid directories.
> ls -Zd /proc/net output before and after the patch should show the difference.

I'm not seeing any difference.

-- 
James Morris
<jmorris@xxxxxxxxx>

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.

[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux