Re: [PATCH] LSM: Fix for security_inode_getsecurity and -EOPNOTSUPP

From	James Morris <jmorris@namei.org>
Newsgroups	linux.kernel
Subject	Re: [PATCH] LSM: Fix for security_inode_getsecurity and -EOPNOTSUPP
Date	2016-06-06 11:40 +0200
Message-ID	<rGZaN-31b-7@gated-at.bofh.it> (permalink)
References	<rF2mt-1c3-7@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Tue, 31 May 2016, Casey Schaufler wrote:

> Subject: [PATCH] LSM: Fix for security_inode_getsecurity and -EOPNOTSUPP
> 
> Serge Hallyn pointed out that the current implementation of
> security_inode_getsecurity() works if there is only one hook
> provided for it, but will fail if there is more than one and
> the attribute requested isn't supplied by the first module.
> This isn't a problem today, since only SELinux and Smack
> provide this hook and there is (currently) no way to enable
> both of those modules at the same time. Serge, however, wants
> to introduce a capability attribute and an inode_getsecurity
> hook in the capability security module to handle it. This
> addresses that upcoming problem, will be required for "extreme
> stacking" and is just a better implementation.
> 
> Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>

Applied to
git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git next

-- 
James Morris
<jmorris@namei.org>

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

[PATCH] LSM: Fix for security_inode_getsecurity and -EOPNOTSUPP Casey Schaufler <casey@schaufler-ca.com> - 2016-06-01 02:40 +0200
  Re: [PATCH] LSM: Fix for security_inode_getsecurity and -EOPNOTSUPP "Serge E. Hallyn" <serge@hallyn.com> - 2016-06-04 07:00 +0200
  Re: [PATCH] LSM: Fix for security_inode_getsecurity and  -EOPNOTSUPP James Morris <jmorris@namei.org> - 2016-06-06 11:40 +0200

csiph-web