[lkml]   [2008]   [Oct]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [TOMOYO #11 (linux-next) 01/11] Introduce new LSM hooks where vfsmount is available.
Quoting Shaya Potter <>:
> I know I'm late to the game in this, but as I recently asked about this
> and didn't get an answer, I'll re-ask my approach.
> Why can't you do this
> in lookup()
> - resolve rules (not for single process, but for all processes) for
> said path and tag dentry (seem to already have a hook)
> in permission()

Because it doesn't work

Quick summary: The difference between the pathname model and the label
model is dynamism. The accessi really is determined by the pathname to
the file that you used to access the file. If you try to compute
access based on attributes tagged onto the file, then you have to
re-compute those attributes every time someone renames a file.


 \ /
  Last update: 2008-10-20 21:43    [W:0.111 / U:2.172 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site