Re: [RFC PATCH] Security: ignore private inode from security_file_receive

2015-04-16 Thread Seung-Woo Kim
Hello, On 2015년 04월 16일 22:48, Stephen Smalley wrote: > On 04/16/2015 09:40 AM, Seung-Woo Kim wrote: >> The dma-buf fd from anon_inode can be shared across processes, but >> there is no way to set security permission for the fd. So this >> patch fix just to ignore private inode from

Re: [RFC PATCH] Security: ignore private inode from security_file_receive

2015-04-16 Thread Casey Schaufler
On 4/16/2015 6:40 AM, Seung-Woo Kim wrote: > The dma-buf fd from anon_inode can be shared across processes, but > there is no way to set security permission for the fd. So this > patch fix just to ignore private inode from security_file_receive. > > Signed-off-by: Seung-Woo Kim > --- > > If

Re: [RFC PATCH] Security: ignore private inode from security_file_receive

2015-04-16 Thread Stephen Smalley
On 04/16/2015 09:40 AM, Seung-Woo Kim wrote: > The dma-buf fd from anon_inode can be shared across processes, but > there is no way to set security permission for the fd. So this > patch fix just to ignore private inode from security_file_receive. > > Signed-off-by: Seung-Woo Kim > --- > > If

[RFC PATCH] Security: ignore private inode from security_file_receive

2015-04-16 Thread Seung-Woo Kim
The dma-buf fd from anon_inode can be shared across processes, but there is no way to set security permission for the fd. So this patch fix just to ignore private inode from security_file_receive. Signed-off-by: Seung-Woo Kim --- If security like smack is enabled, the dmabuf fd can not be

Re: [RFC PATCH] Security: ignore private inode from security_file_receive

2015-04-16 Thread Casey Schaufler
On 4/16/2015 6:40 AM, Seung-Woo Kim wrote: The dma-buf fd from anon_inode can be shared across processes, but there is no way to set security permission for the fd. So this patch fix just to ignore private inode from security_file_receive. Signed-off-by: Seung-Woo Kim sw0312@samsung.com

[RFC PATCH] Security: ignore private inode from security_file_receive

2015-04-16 Thread Seung-Woo Kim
The dma-buf fd from anon_inode can be shared across processes, but there is no way to set security permission for the fd. So this patch fix just to ignore private inode from security_file_receive. Signed-off-by: Seung-Woo Kim sw0312@samsung.com --- If security like smack is enabled, the

Re: [RFC PATCH] Security: ignore private inode from security_file_receive

2015-04-16 Thread Stephen Smalley
On 04/16/2015 09:40 AM, Seung-Woo Kim wrote: The dma-buf fd from anon_inode can be shared across processes, but there is no way to set security permission for the fd. So this patch fix just to ignore private inode from security_file_receive. Signed-off-by: Seung-Woo Kim

Re: [RFC PATCH] Security: ignore private inode from security_file_receive

2015-04-16 Thread Seung-Woo Kim
Hello, On 2015년 04월 16일 22:48, Stephen Smalley wrote: On 04/16/2015 09:40 AM, Seung-Woo Kim wrote: The dma-buf fd from anon_inode can be shared across processes, but there is no way to set security permission for the fd. So this patch fix just to ignore private inode from