Messages in this thread | | | Date | Wed, 19 Apr 2006 11:57:27 -0700 | From | Crispin Cowan <> | Subject | Re: [RFC][PATCH 4/11] security: AppArmor - Core access controls |
| |
Arjan van de Ven wrote: > On Wed, 2006-04-19 at 10:49 -0700, Tony Jones wrote: > >> Verify if profile >> + * authorizes mask operations on pathname (due to lack of vfsmnt it is sadly >> + * necessary to search mountpoints in namespace -- when nameidata is passed >> + * more fully, this code can go away). If more than one mountpoint matches >> + * but none satisfy the profile, only the first pathname (mountpoint) is >> + * returned for subsequent logging. >> > that sounds too bad ;) > If I manage to mount /etc/passwd as /tmp/passwd, you'll only find the > later and your entire security system seems to be down the drain. > If you are a confined process, then you don't get to mount things, for this reason, among others.
Crispin -- Crispin Cowan, Ph.D. http://crispincowan.com/~crispin/ Director of Software Engineering, Novell http://novell.com
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |