lkml.org 
[lkml]   [2018]   [Sep]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH 01/10] procfs: add smack subdir to attrs
    On Tue, Sep 11, 2018 at 09:41:32AM -0700, Casey Schaufler wrote:
    > Back in 2007 I made what turned out to be a rather serious
    > mistake in the implementation of the Smack security module.
    > The SELinux module used an interface in /proc to manipulate
    > the security context on processes. Rather than use a similar
    > interface, I used the same interface. The AppArmor team did
    > likewise. Now /proc/.../attr/current will tell you the
    > security "context" of the process, but it will be different
    > depending on the security module you're using.
    >
    > This patch provides a subdirectory in /proc/.../attr for
    > Smack. Smack user space can use the "current" file in
    > this subdirectory and never have to worry about getting
    > SELinux attributes by mistake. Programs that use the
    > old interface will continue to work (or fail, as the case
    > may be) as before.
    >

    Did downstream distributions already merge the stacking patches on
    their own?

    Got a little-bit confused after reading the log above; I already see
    this in in Ubuntu 18.04.1 LTS, v4.15.0-33-generic:

    $ tree /proc/self/attr/
    /proc/self/attr/
    ├── apparmor
    │   ├── current
    │   ├── exec
    │   └── prev
    ├── current
    ├── display_lsm
    ├── exec
    ├── fscreate
    ├── keycreate
    ├── prev
    ├── selinux
    │   ├── current
    │   ├── exec
    │   ├── fscreate
    │   ├── keycreate
    │   ├── prev
    │   └── sockcreate
    ├── smack
    │   └── current
    └── sockcreate

    Thanks,

    --
    Darwi
    http://darwish.chasingpointers.com

    \
     
     \ /
      Last update: 2018-09-12 01:45    [W:2.344 / U:0.732 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site