lkml.org 
[lkml]   [2007]   [Jun]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    Date
    From
    Subject[AppArmor 35/44] Allow permission functions to tell between parent and leaf checks
    Set the LOOKUP_CONTINUE flag when checking parent permissions. This allows
    permission functions to tell between parent and leaf checks.

    Signed-off-by: Andreas Gruenbacher <agruen@suse.de>
    Signed-off-by: John Johansen <jjohansen@suse.de>

    ---
    fs/namei.c | 6 ++++++
    1 file changed, 6 insertions(+)

    --- a/fs/namei.c
    +++ b/fs/namei.c
    @@ -1409,6 +1409,10 @@ static int may_delete(struct inode *dir,
    BUG_ON(victim->d_parent->d_inode != dir);
    audit_inode_child(victim->d_name.name, victim->d_inode, dir);

    +#if 0
    + if (nd)
    + nd->flags |= LOOKUP_CONTINUE;
    +#endif
    error = permission(dir,MAY_WRITE | MAY_EXEC, NULL);
    if (error)
    return error;
    @@ -1446,6 +1450,8 @@ static inline int may_create(struct inod
    return -EEXIST;
    if (IS_DEADDIR(dir))
    return -ENOENT;
    + if (nd)
    + nd->flags |= LOOKUP_CONTINUE;
    return permission(dir,MAY_WRITE | MAY_EXEC, nd);
    }

    --
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2007-06-27 01:27    [W:0.022 / U:2.404 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site