Messages in this thread | | | Subject | Re: 2.6.6-rc3: modular DVB tda1004x broken | From | Stephen Smalley <> | Date | Tue, 04 May 2004 08:13:20 -0400 |
| |
On Mon, 2004-05-03 at 17:54, viro@parcelfarce.linux.theplanet.co.uk wrote: > f) potentially racy flush_unauthorized_files() in selinux code - uses > sys_close() in a strange way.
The SELinux flush_unauthorized_files code is based on flush_old_files in fs/exec.c. It is only executed upon a SID/context transition to flush files that are not authorized for the new SID/context, and sharing of the open file table across such transitions requires a share permission that is only allowed where absolutely necessary, e.g. kernel->init. Do we need to change the code?
-- Stephen Smalley <sds@epoch.ncsc.mil> National Security Agency
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |