[lkml]   [2014]   [Nov]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [PATCH 2/7] Overlayfs: Use copy-up security hooks
On Friday, November 07, 2014 10:05:40 PM David Howells wrote:
> Paul Moore <> wrote:
> > So the LSM must modify the xattr in place? I suppose that since the
> > @value is allocated to the max size it shouldn't be a problem. Just
> > checking ...
> ... And the caller must provide a maximally sized buffer (which it likely
> has to allocate anyway).
> I'm not sure I really need to provide the modification thing. I suspect a
> binary keep or discard decision is sufficient.

The docker use case we've been talking about in this thread doesn't really
care about the on-disk file labels (xattrs) because the docker folks want to
use context= mounts; however if someone did care about on-disk file labels for
the upper layer in the overlayfs then they might want to modify the xattr.

paul moore

 \ /
  Last update: 2014-11-10 17:01    [W:0.077 / U:0.616 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site