Messages in this thread | | | Subject | Re: Security issues with local filesystem caching | From | Karl MacMillan <> | Date | Thu, 02 Nov 2006 11:29:24 -0500 |
| |
On Wed, 2006-11-01 at 12:45 -0500, Stephen Smalley wrote: > On Wed, 2006-11-01 at 10:58 -0500, Karl MacMillan wrote:
<snip>
> > fssid seems like the wrong name, though it does match the DAC concept. > > This is really more general impersonation of another domain by the > > kernel and might have other uses. > > NFS will want a fssid in order to have file access checks applied > against the client process' SID if/when the client process' context > becomes available.
I was suggesting that it might be helpful if this applied to all checks - not just file access - and would therefore need a different name.
Karl
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |