Messages in this thread | | | Date | Mon, 28 Sep 2009 07:38:55 +0200 | Subject | Re: [RFC][PATCH] Privilege dropping security module | From | "Rob Meijer" <> |
| |
On Sat, September 26, 2009 23:35, Andy Spencer wrote: >> It's amazing who much of this stuff there is to attend to. If you >> haven't, run checkpatch.py on your patches. You'll need to pass that >> eventually. > > I've fixed the remaining things that checkpatch.pl suggests as well as a > few others and will include those checks for future patches. > > >> Hmm. You are working with the Linux DAC mechanism, even if only within >> a process tree. You're not dropping privilege, you're applying a mask >> to the file permission bits, currently for file system objects, and >> with other objects (sysvipc at least) in the future. Hmm. modemask? >> Something derived from "restricted process tree?" > > `Access Control Masking' or `Policy Masking' perhaps? >
Or 'Permission Attenuation' ?
| |