From mboxrd@z Thu Jan 1 00:00:00 1970 From: James Morris Subject: Re: [RFC]Introduce generalized hooks for getting and setting inode secctx v3 Date: Thu, 20 Mar 2008 01:19:46 +1100 (EST) Message-ID: References: <868245.60928.qm@web36604.mail.mud.yahoo.com> Mime-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Cc: "David P. Quigley" , chrisw-69jw2NvuJkxg9hUCZPvPmw@public.gmane.org, sds-+05T5uksL2qpZYMLLGbcSA@public.gmane.org, hch-jcswGhMUV9g@public.gmane.org, viro-RmSDqhL/yNMiFSDQTTA3OLVCufUGDwFn@public.gmane.org, selinux-+05T5uksL2qpZYMLLGbcSA@public.gmane.org, linux-security-module-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, linux-fsdevel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, nfsv4-6DNke4IJHB0gsBAKwltoeQ@public.gmane.org To: Casey Schaufler Return-path: In-Reply-To: <868245.60928.qm-he8kWsucR9OvuULXzWHTWIglqE1Y4D90QQ4Iyu8u01E@public.gmane.org> Sender: owner-selinux-+05T5uksL2qpZYMLLGbcSA@public.gmane.org List-Id: linux-fsdevel.vger.kernel.org On Wed, 19 Mar 2008, Casey Schaufler wrote: > I still dislike having an interface that explicitly disallows > security attribute integrity. That does not help me feel secure. What do you mean? -- James Morris