Re: [RFC PATCH v9 0/3] Add introspect_access(2) (was O_MAYEXEC)
- From
- Matthew Wilcox <willy@infradead.org>
- Date
- 2020-09-10 18:43:11
- Also in
- linux-fsdevel, linux-integrity, linux-security-module, lkml
- Reply to
- Mickaël Salaün, 2020-09-10
On Thu, Sep 10, 2020 at 08:38:21PM +0200, Mickaël Salaün wrote:
There is also the use case of noexec mounts and file permissions. From user space point of view, it doesn't matter which kernel component is in charge of defining the policy. The syscall should then not be tied with a verification/integrity/signature/appraisal vocabulary, but simply an access control one.
permission()?