Messages in this thread | | | Date | Fri, 3 Sep 2004 15:01:11 +0100 | From | Christoph Hellwig <> | Subject | Re: [Umbrella-devel] Re: Getting full path from dentry in LSM hooks |
| |
On Fri, Sep 03, 2004 at 03:20:55PM +0200, Kristian Sørensen wrote: > But we do not have a struct file - just an inode or a dentry :((
Then you can't generate a full path.
> We are working on a project called Umbrella, (umbrella.sf.net) which > implements processbased mandatory accesscontrol in the Linux kernel. > This access control is controlled by "restriction", e.g. by restricting > some process from accessing any given file or directory. > > E.g. if a root owned process is restricted from accessing /var/www, and > the process is compromised by an attacker, no mater what he does, he > would not be able to access this directory.
mount --bind /var/www /home/joe/p0rn/, and then?
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |