lkml.org 
[lkml]   [2011]   [Apr]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH] 2.6.38: access permission filesystem 0.24
On 4/10/2011 2:50 PM, Olaf Dietsche wrote:
> This *untested* patch adds a new permission managing file system.
> Furthermore, it adds two modules, which make use of this file system.
>
> One module allows granting capabilities based on user-/groupid. The
> second module allows to grant access to lower numbered ports based on
> user-/groupid, too.
>
> Changes:
> - updated to 2.6.38
>
> This patch is available at:
> <http://www.olafdietsche.de/linux/accessfs/>
>
> and attached inline below.
>
> Regards, Olaf
>
> Documentation/filesystems/accessfs.txt | 41 +++
> fs/Kconfig | 1 +
> fs/Makefile | 1 +
> fs/accessfs/Kconfig | 63 +++++
> fs/accessfs/Makefile | 11 +
> fs/accessfs/capabilities.c | 108 ++++++++
> fs/accessfs/inode.c | 432 ++++++++++++++++++++++++++++++++
> fs/accessfs/ip.c | 101 ++++++++
> include/linux/accessfs_fs.h | 42 +++
> include/net/sock.h | 43 ++++
> net/Kconfig | 12 +
> net/Makefile | 1 +
> net/hooks.c | 55 ++++
> net/ipv4/af_inet.c | 2 +-
> net/ipv6/af_inet6.c | 2 +-
> 15 files changed, 913 insertions(+), 2 deletions(-)


+config ACCESSFS_USER_PORTS
+ tristate "User permission based IP ports"
+ depends on ACCESS_FS
+ select NET_HOOKS
+ default n
+ help
+ If you say Y here, you will be able to control access to IP ports
+ based on user-/groupid. For this to work, you must say Y
+ to CONFIG_NET_HOOKS.

That last sentence is handled (in theory) by "select NET_HOOKS", right?

But NET_HOOKS depends on INET && EXPERIMENTAL, so this config should not
select NET_HOOKS unless INET && EXPERIMENTAL are enabled also.



\
 
 \ /
  Last update: 2011-04-11 04:05    [W:0.055 / U:0.344 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site