From mboxrd@z Thu Jan  1 00:00:00 1970
From: Eric Paris <eparis-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
Subject: Re: A few concerns about fanotify implementation.
Date: Tue, 26 Oct 2010 10:58:45 -0400
Message-ID: <1288105125.2655.95.camel@localhost.localdomain>
References: <1288095195.29745.4010.camel@novikov-v>
	<201010261358.46974.tvrtko.ursulin@sophos.com>
	<1288101514.7715.46.camel@novikov-v>
	<201010261522.34157.tvrtko.ursulin@sophos.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Cc: Vasily Novikov <vasily.novikov-BkmlMuIjteXqlBn2x/YWAg@public.gmane.org>,
	"linux-fsdevel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org" <linux-fsdevel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org>,
	"malware-list-h+Im9A44IAFcMpApZELgcQ@public.gmane.org" <malware-list-h+Im9A44IAFcMpApZELgcQ@public.gmane.org>
To: Tvrtko Ursulin <tvrtko.ursulin-j34lQMj1tz/QT0dZR+AlfA@public.gmane.org>
Return-path: <malware-list-bounces-h+Im9A44IAFcMpApZELgcQ@public.gmane.org>
In-Reply-To: <201010261522.34157.tvrtko.ursulin-j34lQMj1tz/QT0dZR+AlfA@public.gmane.org>
List-Unsubscribe: <http://dmesg2.printk.net/cgi-bin/mailman/listinfo/malware-list>,
	<mailto:malware-list-request-h+Im9A44IAFcMpApZELgcQ@public.gmane.org?subject=unsubscribe>
List-Archive: <http://dmesg2.printk.net/pipermail/malware-list>
List-Post: <mailto:malware-list-h+Im9A44IAFcMpApZELgcQ@public.gmane.org>
List-Help: <mailto:malware-list-request-h+Im9A44IAFcMpApZELgcQ@public.gmane.org?subject=help>
List-Subscribe: <http://dmesg2.printk.net/cgi-bin/mailman/listinfo/malware-list>,
	<mailto:malware-list-request-h+Im9A44IAFcMpApZELgcQ@public.gmane.org?subject=subscribe>
Sender: malware-list-bounces-h+Im9A44IAFcMpApZELgcQ@public.gmane.org
Errors-To: malware-list-bounces-h+Im9A44IAFcMpApZELgcQ@public.gmane.org
List-Id: linux-fsdevel.vger.kernel.org

On Tue, 2010-10-26 at 15:22 +0100, Tvrtko Ursulin wrote:
> On Tuesday 26 Oct 2010 14:58:34 Vasily Novikov wrote:
> > > > 2. As I understood it was intended to flush cache via FAN_MARK_FLUSH
> > > > flag but it is currently disabled and there is no notion about it in
> > > > the man page. There are cases when it is necessary to flush all cache,
> > > > for example on anti-malware bases update.
> > >
> > > Where do you see this as disabled?
> >
> > In fanotify_mark syscall flags argument is checked and if FAN_MARK_FLUSH
> > bit is set then EINVAL error is returned.
> 
> [snip]
> 
> >     40  #define FAN_ALL_MARK_FLAGS      (FAN_MARK_ADD |\
> >     41                                   FAN_MARK_REMOVE |\
> >     42                                   FAN_MARK_DONT_FOLLOW |\
> >     43                                   FAN_MARK_ONLYDIR |\
> >     44                                   FAN_MARK_MOUNT |\
> >     45                                   FAN_MARK_IGNORED_MASK |\
> >     46                                   FAN_MARK_IGNORED_SURV_MODIFY)
> >
> > fs/notify/fanotify/fanotify_user.c:
> >    678  SYSCALL_DEFINE(fanotify_mark)(int fanotify_fd, unsigned int
> > flags,
> >    679                                __u64 mask, int dfd,
> >    680                                const char  __user * pathname)
> >    ...
> >    696          if (flags & ~FAN_ALL_MARK_FLAGS)
> >    697                  return -EINVAL;
> 
> You are right. I suspect it is just an accidental omission of FAN_MARK_FLUSH
> from FAN_ALL_MARK_FLAGS. Eric would probably appreciate if you send him a
> patch for this since he is quite busy these days.

I actually started to get the fanotify tree into order last night.  I'll
try to address all of your comments and send my series of patches today.
Thanks SOOOOOOOOOO much for the review!

-Eric