Re: [AppArmor 32/44] Enable LSM hooks to distinguish operations on file descriptors from operations on pathnames

James Morris
2007-06-28T16:12:25Z

On Tue, 26 Jun 2007, jjohansen@suse.de wrote:

> Struct iattr already contains ia_file since commit cc4e69de from
> Miklos (which is related to commit befc649c). Use this to pass
> struct file down the setattr hooks. This allows LSMs to distinguish
> operations on file descriptors from operations on paths.

I'm not quite sure I understand this.

Why would you distinguish operations based on whether you have a pathname
or an inode for an object ?

Are you trying to cater for the case where you're holding an open fd for a
file which has been deleted, and thus has no pathname?

- James
--
James Morris
<jmorris@namei.org>