Re: [PATCH v2 1/2] security: Add hook to invalidate inode security labels

From	Andreas Gruenbacher <agruenba@redhat.com>
Newsgroups	linux.kernel
Subject	Re: [PATCH v2 1/2] security: Add hook to invalidate inode security labels
Date	2015-10-05 20:40 +0200
Message-ID	<qgiQ1-735-11@gated-at.bofh.it> (permalink)
References	<qfWZb-Zo-11@gated-at.bofh.it> <qfX8S-1ay-15@gated-at.bofh.it> <qgiGl-6S2-17@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Mon, Oct 5, 2015 at 8:24 PM, Casey Schaufler <casey@schaufler-ca.com> wrote:
> On 10/4/2015 12:19 PM, Andreas Gruenbacher wrote:
>> Add a hook to invalidate an inode's security label when the cached
>> information becomes invalid.
>
> Where is this used?

See the next patch in this patch queue, gfs2.

> If I need to do the same for Smack or any other module, how would I know that
> it works right?

I haven't looked at Smack but if it does the same thing as SELinux,
then label updates on one gfs2 nod ein a cluster won't become visible
on other nodes without this fix, and with this fix they will.

Andreas
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

[PATCH v2 0/2] Inode security label invalidation Andreas Gruenbacher <agruenba@redhat.com> - 2015-10-04 21:20 +0200
  [PATCH v2 2/2] gfs2: Invalide security labels of inodes that go invalid Andreas Gruenbacher <agruenba@redhat.com> - 2015-10-04 21:30 +0200
  [PATCH v2 1/2] security: Add hook to invalidate inode security labels Andreas Gruenbacher <agruenba@redhat.com> - 2015-10-04 21:30 +0200
    Re: [PATCH v2 1/2] security: Add hook to invalidate inode security  labels Stephen Smalley <sds@tycho.nsa.gov> - 2015-10-05 17:20 +0200
      Re: [PATCH v2 1/2] security: Add hook to invalidate inode security labels Andreas Gruenbacher <agruenba@redhat.com> - 2015-10-06 00:00 +0200
        Re: [PATCH v2 1/2] security: Add hook to invalidate inode security  labels Stephen Smalley <sds@tycho.nsa.gov> - 2015-10-06 23:40 +0200
    Re: [PATCH v2 1/2] security: Add hook to invalidate inode security  labels Casey Schaufler <casey@schaufler-ca.com> - 2015-10-05 20:30 +0200
      Re: [PATCH v2 1/2] security: Add hook to invalidate inode security labels Andreas Gruenbacher <agruenba@redhat.com> - 2015-10-05 20:40 +0200

csiph-web