lkml.org 
[lkml]   [2003]   [Apr]   [24]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: [PATCH] Extended Attributes for Security Modules against 2.5.68
From
Date
On Thu, 2003-04-24 at 15:40, Andreas Dilger wrote:
> Couldn't that be used to do the trusted-namespace- means-CAP_SYS_ADMIN
> checks, but it can be replaced by other LSM security modules if desired?

If we move the CAP_SYS_ADMIN checks from the trusted xattr handlers to
the corresponding hook functions in the capabilities module, then we can
replace those checks with our own permission checking for user process
access to trusted.selinux and avoid any restrictions when the SELinux
module internally performs getxattr and setxattr inode operations to
manage the security labels. This isn't difficult to implement, but
implies a change in meaning for the trusted namespace. As I understand
it, that namespace is intended for attributes that can be managed by
superuser processes. Using that namespace for SELinux means that it
will also be used for attributes managed and used internally by the
security module for access control purposes. I'm not sure that you want
to mix them; it would be similar to putting ACLs in the trusted
namespace.

--
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:35    [W:0.063 / U:0.224 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site