On Tue, Dec 7, 2010 at 9:58 AM, Casey Schaufler <casey@xxxxxxxxxxxxxxxx> wrote: > One of the concerns that has traditionally been raised when new > LSM hooks or changes to existing hooks are proposed is that of > generality. I can think of a number of ways in which the final > component of a pathname could be used to make access control > decisions, but I would not expect to be using them myself. Who > else might you expect to make use of this LSM "enhancement", or > is this something that only SELinux is ever going to want? Is > the component something the LSM should be providing in general, > or is this the only case in which it makes sense? The existing inode_init_security hook is useful for any security module that maintains security attributes on inodes (although when it was added, it was only first used by SELinux as that was the only such security module), and adding the last component name as a further input argument is a general change that could benefit any such security module that wants to use that information in determining the correct attribute value for the new inode. The fact that there are only two such modules that implement the hook today (SELinux and Smack), and that you chose to not use the argument for Smack doesn't lessen its generality. If you have an alternative parameter that would be more general that you would like to pass to the hook that would enable SELinux to do what it wants and provide benefit to Smack, then feel free to suggest it. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
