[lkml]   [2008]   [Mar]   [18]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [patch 00/11] mount ownership and unprivileged mount syscall (v9)
> Something to consider down the track would be how to possibly allow this 
> with SELinux, which only knows about normal mounts.


> We might need a user_mount hook which is called once the core kernel code
> determines that it is a a valid unprivileged mount (although the sb_mount
> hook will already have been called, IIUC).

Does the order matter between core code's and the security module's
permission checks? If it does, the cleanest would be to just move the
core checks before the sb_mount hook, no?


 \ /
  Last update: 2008-03-18 12:37    [W:0.067 / U:0.872 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site