Re: [RESEND][RFC][PATCH 2/7] implementation of LSM hooks

Arjan van de Ven
2006-04-19T05:23:30Z

On Tue, 2006-04-18 at 16:09 -0700, Casey Schaufler wrote:
> --- Alan Cox <alan@lxorguk.ukuu.org.uk> wrote:
>
> > ... A file name is a pretty
> > meaningless object in Unixspace ...
>
> Stephen is right that the inode is the object.
> Crispin is right that people care about path names.
>
> The linux-audit folks have been hashing this
> about good and hard. It is true that both the
> pathname /etc/shadow and the inode it represents
> are interesting from various secuirty viewpoints.
> If you insist on either being the definitive
> security referent you will be wrong about half
> the time.

just that LSM is inode based ;)