Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1546190

Re: [PATCH v1] security: Add a new hook: inode_touch_atime

Show all headers | View raw

On Thu, Dec 22, 2016 at 12:15:06AM +0100, Mickaël Salaün wrote:
> Add a new LSM hook named inode_touch_atime which is needed to deny
> indirect update of extended file attributes (i.e. access time) which are
> not catched by the inode_setattr hook. By creating a new hook instead of
> calling inode_setattr, we avoid to simulate a useless struct iattr.
> 
> This hook allows to create read-only environments as with read-only
> mount points. It can also take care of anonymous inodes.

And LSM has absolutely no business doing that - that's what the mount
code is for.

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

[PATCH v1] security: Add a new hook: inode_touch_atime Mickaël Salaün <mic@digikod.net> - 2016-12-22 00:20 +0100
  Re: [PATCH v1] security: Add a new hook: inode_touch_atime Casey Schaufler <casey@schaufler-ca.com> - 2016-12-22 00:40 +0100
    Re: [PATCH v1] security: Add a new hook: inode_touch_atime Mickaël Salaün <mic@digikod.net> - 2016-12-22 01:10 +0100
      Re: [PATCH v1] security: Add a new hook: inode_touch_atime Casey Schaufler <casey@schaufler-ca.com> - 2016-12-22 01:40 +0100
      Re: [PATCH v1] security: Add a new hook: inode_touch_atime Al Viro <viro@ZenIV.linux.org.uk> - 2016-12-22 02:00 +0100
        Re: [PATCH v1] security: Add a new hook: inode_touch_atime Mickaël Salaün <mic@digikod.net> - 2016-12-22 10:10 +0100
          Re: [PATCH v1] security: Add a new hook: inode_touch_atime Christoph Hellwig <hch@infradead.org> - 2016-12-22 10:10 +0100
  Re: [PATCH v1] security: Add a new hook: inode_touch_atime Christoph Hellwig <hch@infradead.org> - 2016-12-22 07:30 +0100

csiph-web