| Date | Thu, 08 Oct 2009 10:22:25 -0700 | From | John Johansen <> | Subject | Re: [TOMOYO #16 03/25] LSM: Pass original mount flags to security_sb_mount(). |
| |
Tetsuo Handa wrote: > This patch allows LSM modules to determine based on original mount flags > passed to mount(). A LSM module can get masked mount flags (if needed) by > > flags &= ~(MS_NOSUID | MS_NOEXEC | MS_NODEV | MS_ACTIVE | > MS_NOATIME | MS_NODIRATIME | MS_RELATIME| MS_KERNMOUNT | > MS_STRICTATIME);
This looks good, and would also have use in AppArmor.
|