From mboxrd@z Thu Jan 1 00:00:00 1970 From: David Howells Subject: Re: [PATCH 09/37] Security: Allow kernel services to override LSM settings for task actions Date: Fri, 22 Feb 2008 13:06:29 +0000 Message-ID: <20272.1203685589@redhat.com> References: <55722.57422.qm@web36602.mail.mud.yahoo.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Cc: Trond.Myklebust@netapp.com, nfsv4@linux-nfs.org, linux-kernel@vger.kernel.org, dhowells@redhat.com, linux-security-module@vger.kernel.org, selinux@tycho.nsa.gov, linux-fsdevel@vger.kernel.org To: casey@schaufler-ca.com Return-path: In-Reply-To: <55722.57422.qm@web36602.mail.mud.yahoo.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: nfsv4-bounces@linux-nfs.org Errors-To: nfsv4-bounces@linux-nfs.org List-Id: linux-fsdevel.vger.kernel.org Casey Schaufler wrote: > > +static int smack_task_kernel_act_as(struct task_struct *p, > > + struct task_security *sec, u32 secid) > > +{ > > + return -ENOTSUPP; > > +} > ... > > +static int smack_task_create_files_as(struct task_struct *p, > > + struct task_security *sec, > > + struct inode *inode) > > +{ > > + return -ENOTSUPP; > > +} > > Hum. ENOTSUPP is not not very satisfying, is it? I will have to > think on this a bit. Sorry, I meant to ping you on this directly. I'm not sure how to effect these two functions for Smack. > Except for the fact that the hooks don't do anything this > looks fine. I'm not sure that I would want these hooks to > do anything, it requires additional thought to determine if > there is a good behavior for them. Note that you won't be able to use CacheFiles with Smack if either of these just returns an error. This may also affect NFSd in the future too. smack_task_create_files_as() is passed the label that new files created by CacheFiles should be created with. For smack_task_kernel_act_as(), it may be sufficient to set CAP_MAC_OVERRIDE in the task_security struct and leave it as that. It also may not be sufficient, as NFSd may end up using this to set the subjective security label supplied by the NFS client. I don't know, though, whether Smack is going to be involved in that passing labels over NFS. David