Messages in this thread | | | From | Andreas Gruenbacher <> | Subject | Re: [AppArmor 01/41] Pass struct vfsmount to the inode_create LSMhook | Date | Wed, 30 May 2007 00:10:55 +0200 |
| |
On Tuesday 29 May 2007 22:47, Tetsuo Handa wrote: > AppArmor can't determine which pathname (/tmp/public/file or > /tmp/secret/file) was requested by touch command if bound mount is used in > the following way > > # mkdir /tmp/public /tmp/secret > # mount -t tmpfs none /tmp/public > # mount --bind /tmp/public /tmp/secret > # touch /tmp/public/file > > because security_inode_create() doesn't receive vfsmount, can it?
I don't know what you are talking about -- the very first patch in the AppArmor series adds the vfsmount parameter to security_inode_create().
Andreas - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |