lkml.org 
[lkml]   [2019]   [Oct]   [15]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH 2/7] Add a concept of a "secure" anonymous file
    On Sat, Oct 12, 2019 at 12:15:57PM -0700, Daniel Colascione wrote:
    > A secure anonymous file is one we hooked up to its own inode (as
    > opposed to the shared inode we use for non-secure anonymous files). A
    > new selinux hook gives security modules a chance to initialize, label,
    > and veto the creation of these secure anonymous files. Security
    > modules had limit ability to interact with non-secure anonymous files
    > due to all of these files sharing a single inode.

    Again please add Al. Also explain what the problem would be to always
    use a separate inode.

    \
     
     \ /
      Last update: 2019-10-15 10:08    [W:2.409 / U:0.064 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site