Messages in this thread | | | Date | Fri, 26 Oct 2007 11:26:05 -0700 | From | John Johansen <> | Subject | Re: [AppArmor 35/45] Allow permission functions to tell between parent and leaf checks |
| |
On Fri, Oct 26, 2007 at 08:32:23AM -0400, Stephen Smalley wrote: > On Thu, 2007-10-25 at 23:40 -0700, jjohansen@suse.de wrote: > > plain text document attachment (parent-permission.diff) > > Set the LOOKUP_CONTINUE flag when checking parent permissions. This allows > > permission functions to tell between parent and leaf checks. > > > > Signed-off-by: Andreas Gruenbacher <agruen@suse.de> > > Signed-off-by: John Johansen <jjohansen@suse.de> > > > > --- > > fs/namei.c | 6 ++++++ > > 1 file changed, 6 insertions(+) > > > > --- a/fs/namei.c > > +++ b/fs/namei.c > > @@ -1472,6 +1472,10 @@ static int may_delete(struct inode *dir, > > BUG_ON(victim->d_parent->d_inode != dir); > > audit_inode_child(victim->d_name.name, victim, dir); > > > > +#if 0 > > + if (nd) > > + nd->flags |= LOOKUP_CONTINUE; > > +#endif > > #if 0? > Oops, thanks I missed that one.
regards john [unhandled content-type:application/pgp-signature] | |