lkml.org 
[lkml]   [2007]   [Dec]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    SubjectRe: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]
    Date
    Casey Schaufler <casey@schaufler-ca.com> wrote:

    > What sort of authorization are you thinking of? I would expect
    > that to have been done by cachefileselinuxcontext (or
    > cachefilesspiffylsmcontext) up in userspace. If you're going to
    > rely on userspace applications for policy enforcement they need
    > to be good enough to count on after all.

    It can't be done in userspace, otherwise someone using the cachefilesd
    interface can pass an arbitrary context up. The security context has to be
    passed across the file descriptor attached to /dev/cachefiles along with the
    other configuration parameters as a text string. This fd selects the
    particular cache context that a particular instance of a running daemon is
    using.

    David


    \
     
     \ /
      Last update: 2007-12-12 19:37    [W:0.080 / U:0.104 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site