Re: [RFC v3 01/10] lsm: add security_socket_closed()

Tetsuo Handa [off-list ref] writes:

Samir Bellabes wrote:

quoted

Allow a module to update security informations when a socket is closed.

Is security_inode_free() too late for doing it?

static void ccs_inode_free_security(struct inode *inode)
{
        if (inode->i_sb && inode->i_sb->s_magic == SOCKFS_MAGIC)
                ccs_update_socket_tag(inode, 0);
}

I don't think it's too late.
But in sock_close() we are sure to deal with a inode which is a socket.

In ccs_inode_free_security(), we need to add small to check if the inode
is a socket or something else.

sam