lkml.org 
[lkml]   [2011]   [Apr]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH 1/3] SECURITY: Move exec_permission RCU checks into security modules
    On Thu, Apr 21, 2011 at 05:23:19PM -0700, Andi Kleen wrote:
    > From: Andi Kleen <ak@linux.intel.com>
    >
    > Right now all RCU walks fall back to reference walk when CONFIG_SECURITY
    > is enabled, even though just the standard capability module is active.
    > This is because security_inode_exec_permission unconditionally fails
    > RCU walks.
    >
    > Move this decision to the low level security module. This requires
    > passing the RCU flags down the security hook. This way at least
    > the capability module and a few easy cases in selinux/smack work
    > with RCU walks with CONFIG_SECURITY=y
    >
    > Signed-off-by: Andi Kleen <ak@linux.intel.com>
    > ---
    > include/linux/security.h | 2 +-
    > security/capability.c | 2 +-
    > security/security.c | 6 ++----
    > security/selinux/hooks.c | 6 +++++-
    > security/smack/smack_lsm.c | 6 +++++-
    > 5 files changed, 14 insertions(+), 8 deletions(-)

    This seems to miss the hunk in fs/namei.c where the LSM hook is called.



    \
     
     \ /
      Last update: 2011-04-22 06:37    [W:0.021 / U:61.820 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site