lkml.org 
[lkml]   [2014]   [Nov]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: [PATCH 1/7] Security: Provide copy-up security hooks for unioned files
Date
On Friday, November 07, 2014 10:10:34 PM David Howells wrote:
> Paul Moore <paul@paul-moore.com> wrote:
> > This didn't occur to me earlier, but we may want to pick a different
> > phrase to use instead of "copy_up" as that has a special meaning for some
> > security/MLS folks...
>
> It does?

Yep, think upgrading the sensitivity level, e.g. relabeling a "secret" file up
to a "top secret".

> security_inode_make_union()?

Actually, after thinking on this some more, forget I mentioned anything. The
existing "copy_up" makes the most sense for the LSM hook (it matches the
naming of the caller in overlayfs, which is a nice thing) and the number of
times any MLS will look that closely at the kernel code is going to be very
few.

--
paul moore
www.paul-moore.com



\
 
 \ /
  Last update: 2014-11-10 16:41    [W:0.064 / U:0.860 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site