Adding a security parameter to VFS functions

2007-08-15 Thread David Howells
Hi Linus, Al, Would you object greatly to functions like vfs_mkdir() gaining a security parameter? What I'm thinking of is this: int vfs_mkdir(struct inode *dir, struct dentry *dentry, int mode, struct security *security) Where the security context is the state

Re: Adding a security parameter to VFS functions

2007-08-15 Thread Casey Schaufler
--- David Howells [EMAIL PROTECTED] wrote: Hi Linus, Al, Would you object greatly to functions like vfs_mkdir() gaining a security parameter? Could you describe how this compares to the proposal that the AppArmor developers suggested recently? I expect that we can reduce the amount of

Re: [PATCH 00/16] Permit filesystem local caching [try #3]

2007-08-15 Thread Casey Schaufler
--- Stephen Smalley [EMAIL PROTECTED] wrote: On Tue, 2007-08-14 at 08:53 -0700, Casey Schaufler wrote: --- David Howells [EMAIL PROTECTED] wrote: Casey Schaufler [EMAIL PROTECTED] wrote: With Smack you can leave the label alone, raise CAP_MAC_OVERRIDE, do your business of