Messages in this thread | | | From | Samir Bellabes <> | Subject | Re: [RFC v3 01/10] lsm: add security_socket_closed() | Date | Tue, 03 May 2011 17:41:45 +0200 |
| |
Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> writes:
> Samir Bellabes wrote: >> Allow a module to update security informations when a socket is closed. > Is security_inode_free() too late for doing it? > > static void ccs_inode_free_security(struct inode *inode) > { > if (inode->i_sb && inode->i_sb->s_magic == SOCKFS_MAGIC) > ccs_update_socket_tag(inode, 0); > }
I don't think it's too late. But in sock_close() we are sure to deal with a inode which is a socket.
In ccs_inode_free_security(), we need to add small to check if the inode is a socket or something else.
sam
| |