lkml.org 
[lkml]   [2010]   [Mar]   [8]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Upstream first policy
On Mon, Mar 08, 2010 at 10:08:31AM -0800, Linus Torvalds wrote:

> In other words: it really _does_ make more sense to say "this process has
> rights to overwrite the path '/etc/passwd'" than it does to try to label
> the file. The _fundamental_ rule is about the pathname. The labeling comes
> about BECAUSE YOU USED A HAMMER FOR A SCREW.
>
> I really don't understand why some people are unable to admit this fact.

Because you don't have to use that pathname to modify the bits returned
by read() after open() on that pathname?

I'm not fond of selinux, to put it mildly, but "pathname-based" stuff simply
doesn't match how the pathname resolution is defined on Unix...


\
 
 \ /
  Last update: 2010-03-08 19:47    [W:0.214 / U:0.420 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site