lkml.org 
[lkml]   [2006]   [Nov]   [2]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: Security issues with local filesystem caching
    From
    Date
    On Wed, 2006-11-01 at 12:45 -0500, Stephen Smalley wrote:
    > On Wed, 2006-11-01 at 10:58 -0500, Karl MacMillan wrote:

    <snip>


    > > fssid seems like the wrong name, though it does match the DAC concept.
    > > This is really more general impersonation of another domain by the
    > > kernel and might have other uses.
    >
    > NFS will want a fssid in order to have file access checks applied
    > against the client process' SID if/when the client process' context
    > becomes available.

    I was suggesting that it might be helpful if this applied to all checks
    - not just file access - and would therefore need a different name.

    Karl

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2006-11-02 17:33    [W:4.357 / U:0.552 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site