Thread (11 messages) 11 messages, 5 authors, 2022-09-08

Re: [PATCH v4] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing

From: David Howells <dhowells@redhat.com>
Date: 2022-08-30 08:49:16
Also in: linux-fsdevel, linux-nfs, lkml, selinux

Casey Schaufler [off-list ref] wrote:
The authors of this version of the mount code failed to look
especially closely at how Smack maintains label names. Once a
label name is used in the kernel it is kept on a list forever.
All the copies of smk_known here and in the rest of the mount
infrastructure are unnecessary and wasteful. The entire set of
Smack hooks that deal with mounting need to be reworked to remove
that waste. It's on my list of Smack cleanups, but I'd be happy
if someone else wanted a go at it.
I don't have time to overhaul Smack right now.  Should I drop the Smack part
of the patch?

David
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help