Re: [RFC 0/3] WhiteEgret LSM module

From	Steve Kemp <steve.backup.kemp@googlemail.com>
Newsgroups	linux.kernel
Subject	Re: [RFC 0/3] WhiteEgret LSM module
Date	2017-06-02 22:30 +0200
Message-ID	<tO1mN-5Va-9@gated-at.bofh.it> (permalink)
References	(1 earlier) <tMWIx-43x-3@gated-at.bofh.it> <tN9w5-3Ek-3@gated-at.bofh.it> <tNdJp-6BP-27@gated-at.bofh.it> <tNYIi-4cS-15@gated-at.bofh.it> <tO07o-5bS-19@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Fri, Jun 2, 2017 at 10:00 PM, Casey Schaufler <casey@schaufler-ca.com> wrote:

> A 'user' attribute can be set by the file owner. A 'security'
> attribute requires privilege. SELinux and Smack use 'security'
> attributes to prevent users from mucking with them. You need
> to create module hooks for manipulating them,

That's nice and clear, I appreciate you explaining it to me.

I'll have a go at updating my toy LSM to do that shortly.  For
reference I placed the patch here, but don't expect to submit it
formally to lkmk as it was more an interesting learning experience:

https://github.com/skx/linux/pull/1

(I did take the time to rename it from steve_lsm.c to whitelist_lsm.c
though, lest I look too vain!)

Steve
-- 
https://steve.fi/

Thread

[RFC 0/3] WhiteEgret LSM module Masanobu Koike <masanobu2.koike@toshiba.co.jp> - 2017-05-30 14:00 +0200
  Re: [RFC 0/3] WhiteEgret LSM module Casey Schaufler <casey@schaufler-ca.com> - 2017-05-30 19:20 +0200
    RE: [RFC 0/3] WhiteEgret LSM module <masanobu2.koike@toshiba.co.jp> - 2017-06-06 11:30 +0200
  Re: [RFC 0/3] WhiteEgret LSM module Matthew Garrett <mjg59@google.com> - 2017-05-30 23:20 +0200
    Re: [RFC 0/3] WhiteEgret LSM module Peter Dolding <oiaohm@gmail.com> - 2017-05-31 13:00 +0200
      Re: [RFC 0/3] WhiteEgret LSM module Casey Schaufler <casey@schaufler-ca.com> - 2017-05-31 17:30 +0200
        Re: [RFC 0/3] WhiteEgret LSM module "Serge E. Hallyn" <serge@hallyn.com> - 2017-05-31 17:40 +0200
          Re: [RFC 0/3] WhiteEgret LSM module Peter Dolding <oiaohm@gmail.com> - 2017-06-04 04:50 +0200
            Re: [RFC 0/3] WhiteEgret LSM module "Serge E. Hallyn" <serge@hallyn.com> - 2017-06-04 18:30 +0200
        Re: [RFC 0/3] WhiteEgret LSM module Steve Kemp <steve.backup.kemp@googlemail.com> - 2017-06-02 19:40 +0200
          Re: [RFC 0/3] WhiteEgret LSM module Casey Schaufler <casey@schaufler-ca.com> - 2017-06-02 21:10 +0200
            Re: [RFC 0/3] WhiteEgret LSM module Steve Kemp <steve.backup.kemp@googlemail.com> - 2017-06-02 22:30 +0200
      Re: [RFC 0/3] WhiteEgret LSM module Mehmet Kayaalp <mkayaalp@linux.vnet.ibm.com> - 2017-05-31 17:40 +0200
        Re: [RFC 0/3] WhiteEgret LSM module Peter Dolding <oiaohm@gmail.com> - 2017-06-04 04:30 +0200
          Re: [RFC 0/3] WhiteEgret LSM module Mehmet Kayaalp <mkayaalp@linux.vnet.ibm.com> - 2017-06-04 21:00 +0200
    RE: [RFC 0/3] WhiteEgret LSM module <masanobu2.koike@toshiba.co.jp> - 2017-06-01 14:40 +0200

csiph-web