login
Login
/
Register
Search
Search this site:
Forums
News
Blogs
Features
Site
Home
»
Mailing list archives
»
linux-kernel
»
2007
»
December
»
12
Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]
view
thread
Previous message: [
thread
] [
date
] [
author
]
Next message: [
thread
] [
date
] [
author
]
[view in full thread]
From: Casey Schaufler
Subject:
Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]
Date: Wednesday, December 12, 2007 - 12:20 pm
--- David Howells <dhowells@redhat.com> wrote:
quoted text
> Casey Schaufler <casey@schaufler-ca.com> wrote: > > > You may need to have an application, say cachefileselinuxcontext, that will > > read the current policy and spit out an appropriate value of "<whatever>", > > but that can be separate and LSM specific without mucking up your basic > > infrastructure applications. > > What would I do with such a thing? How would it get run? Spat out to where?
Put it in /etc/init.d/cachefiles and run it at boot time. Put the result into /etc/cachefiles.conf. Have cachefilesd read it and pass it downward. Casey Schaufler
casey@schaufler-ca.com
--
unsubscribe notice
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to
majordomo@vger.kernel.org
More majordomo info at
http://vger.kernel.org/majordomo-info.html
Please read the FAQ at
http://www.tux.org/lkml/
Previous message: [
thread
] [
date
] [
author
]
Next message: [
thread
] [
date
] [
author
]
Messages in current thread:
[PATCH 00/28] Permit filesystem local caching [try #2]
, David Howells
, (Wed Dec 5, 12:38 pm)
[PATCH 01/28] KEYS: Increase the payload size when instant ...
, David Howells
, (Wed Dec 5, 12:38 pm)
[PATCH 02/28] KEYS: Check starting keyring as part of sear ...
, David Howells
, (Wed Dec 5, 12:38 pm)
[PATCH 03/28] KEYS: Allow the callout data to be passed as ...
, David Howells
, (Wed Dec 5, 12:38 pm)
[PATCH 04/28] KEYS: Add keyctl function to get a security ...
, David Howells
, (Wed Dec 5, 12:38 pm)
[PATCH 05/28] Security: Change current->fs[ug]id to curren ...
, David Howells
, (Wed Dec 5, 12:38 pm)
[PATCH 06/28] SECURITY: Separate task security context fro ...
, David Howells
, (Wed Dec 5, 12:38 pm)
[PATCH 07/28] SECURITY: De-embed task security record from ...
, David Howells
, (Wed Dec 5, 12:38 pm)
[PATCH 08/28] SECURITY: Allow kernel services to override ...
, David Howells
, (Wed Dec 5, 12:38 pm)
[PATCH 09/28] FS-Cache: Release page->private after failed ...
, David Howells
, (Wed Dec 5, 12:39 pm)
[PATCH 10/28] FS-Cache: Recruit a couple of page flags for ...
, David Howells
, (Wed Dec 5, 12:39 pm)
[PATCH 11/28] FS-Cache: Provide an add_wait_queue_tail() f ...
, David Howells
, (Wed Dec 5, 12:39 pm)
[PATCH 12/28] FS-Cache: Generic filesystem caching facilit ...
, David Howells
, (Wed Dec 5, 12:39 pm)
[PATCH 13/28] CacheFiles: Add missing copy_page export for ...
, David Howells
, (Wed Dec 5, 12:39 pm)
[PATCH 14/28] CacheFiles: Be consistent about the use of m ...
, David Howells
, (Wed Dec 5, 12:39 pm)
[PATCH 16/28] CacheFiles: Permit the page lock state to be ...
, David Howells
, (Wed Dec 5, 12:39 pm)
[PATCH 17/28] CacheFiles: Export things for CacheFiles [tr ...
, David Howells
, (Wed Dec 5, 12:39 pm)
[PATCH 18/28] CacheFiles: A cache that backs onto a mounte ...
, David Howells
, (Wed Dec 5, 12:39 pm)
[PATCH 19/28] NFS: Use local caching [try #2]
, David Howells
, (Wed Dec 5, 12:39 pm)
[PATCH 20/28] NFS: Configuration and mount option changes ...
, David Howells
, (Wed Dec 5, 12:40 pm)
[PATCH 21/28] NFS: Display local caching state [try #2]
, David Howells
, (Wed Dec 5, 12:40 pm)
[PATCH 22/28] fcrypt endianness misannotations [try #2]
, David Howells
, (Wed Dec 5, 12:40 pm)
[PATCH 23/28] AFS: Add TestSetPageError() [try #2]
, David Howells
, (Wed Dec 5, 12:40 pm)
[PATCH 24/28] AFS: Add a function to excise a rejected wri ...
, David Howells
, (Wed Dec 5, 12:40 pm)
[PATCH 25/28] AFS: Improve handling of a rejected writebac ...
, David Howells
, (Wed Dec 5, 12:40 pm)
[PATCH 26/28] AF_RXRPC: Save the operation ID for debuggin ...
, David Howells
, (Wed Dec 5, 12:40 pm)
[PATCH 28/28] FS-Cache: Make kAFS use FS-Cache [try #2]
, David Howells
, (Wed Dec 5, 12:40 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Mon Dec 10, 9:46 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Mon Dec 10, 10:07 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Mon Dec 10, 10:23 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Mon Dec 10, 2:27 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Casey Schaufler
, (Mon Dec 10, 3:26 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Mon Dec 10, 4:36 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Mon Dec 10, 4:44 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Casey Schaufler
, (Mon Dec 10, 4:46 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Casey Schaufler
, (Mon Dec 10, 4:56 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Tue Dec 11, 11:34 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Casey Schaufler
, (Tue Dec 11, 12:26 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Tue Dec 11, 12:37 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Tue Dec 11, 12:52 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Tue Dec 11, 12:56 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Casey Schaufler
, (Tue Dec 11, 1:40 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Tue Dec 11, 1:42 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Casey Schaufler
, (Tue Dec 11, 2:18 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Tue Dec 11, 2:34 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Casey Schaufler
, (Tue Dec 11, 4:04 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Karl MacMillan
, (Wed Dec 12, 7:41 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Wed Dec 12, 7:53 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Karl MacMillan
, (Wed Dec 12, 7:59 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Wed Dec 12, 8:25 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Casey Schaufler
, (Wed Dec 12, 9:51 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Wed Dec 12, 11:12 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Wed Dec 12, 11:25 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Wed Dec 12, 11:29 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Casey Schaufler
, (Wed Dec 12, 12:20 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Wed Dec 12, 12:29 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Wed Dec 12, 12:33 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Wed Dec 12, 12:35 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Casey Schaufler
, (Wed Dec 12, 12:37 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Casey Schaufler
, (Wed Dec 12, 12:44 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Wed Dec 12, 12:49 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Casey Schaufler
, (Wed Dec 12, 1:09 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Wed Dec 12, 3:29 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Wed Dec 12, 3:49 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Wed Dec 12, 3:55 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Thu Dec 13, 7:49 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Thu Dec 13, 7:51 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Thu Dec 13, 8:36 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Thu Dec 13, 9:03 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Thu Dec 13, 9:23 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Thu Dec 13, 10:01 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Thu Dec 13, 10:27 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Thu Dec 13, 11:04 am)
Re: [PATCH 09/28] FS-Cache: Release page->private after fa ...
, Nick Piggin
, (Thu Dec 13, 8:51 pm)
Re: [PATCH 10/28] FS-Cache: Recruit a couple of page flags ...
, Nick Piggin
, (Thu Dec 13, 9:08 pm)
Re: [PATCH 24/28] AFS: Add a function to excise a rejected ...
, Nick Piggin
, (Thu Dec 13, 9:21 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Wed Jan 9, 9:51 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Wed Jan 9, 10:27 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Wed Jan 9, 11:11 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Wed Jan 9, 12:19 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Thu Jan 10, 4:09 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Mon Jan 14, 7:01 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Mon Jan 14, 7:06 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Casey Schaufler
, (Mon Jan 14, 7:52 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Mon Jan 14, 8:19 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Tue Jan 15, 7:56 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Tue Jan 15, 7:58 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Tue Jan 15, 9:03 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Tue Jan 15, 9:08 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Casey Schaufler
, (Tue Jan 15, 11:10 am)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Stephen Smalley
, (Tue Jan 15, 12:15 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Tue Jan 15, 2:55 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, Casey Schaufler
, (Tue Jan 15, 3:23 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, David Howells
, (Wed Jan 23, 1:52 pm)
Re: [PATCH 08/28] SECURITY: Allow kernel services to overr ...
, James Morris
, (Wed Jan 23, 3:03 pm)
Navigation
Mailing list archives
Recent posts
Popular discussions
linux-kernel
:
Greg KH
Og dreams of kernels
Jens Axboe
[PATCH 31/33] Fusion: sg chaining support
Arnd Bergmann
Re: finding your own dead "CONFIG_" variables
Mark Brown
[PATCH 2/2] Subject: natsemi: Allow users to disable workaround for DspCfg reset
Tony Breeds
[LGUEST] Look in object dir for .config
git
:
Brian Downing
Re: Git in a Nutshell guide
John Benes
Re: master has some toys
Matthias Lederhofer
[PATCH 4/7] introduce GIT_WORK_TREE to specify the work tree
Alexander Sulfrian
[RFC/PATCH] RE: git calls SSH_ASKPASS even if DISPLAY is not set
Junio C Hamano
Re: Rss produced by git is not valid xml?
git-commits-head
:
Linux Kernel Mailing List
iSeries: fix section mismatch in iseries_veth
Linux Kernel Mailing List
ixbge: remove TX lock and redo TX accounting.
Linux Kernel Mailing List
ixgbe: fix several counter register errata
Linux Kernel Mailing List
b43: fix build with CONFIG_SSB_PCIHOST=n
Linux Kernel Mailing List
9p: block-based virtio client
linux-netdev
:
Michael Breuer
Re: [PATCH] af_packet: Don't use skb after dev_queue_xmit()
Michael Breuer
Re: [PATCH] af_packet: Don't use skb after dev_queue_xmit()
David Daney
[PATCH 5/7] Staging: Octeon Ethernet: Convert to NAPI.
Wolfgang Grandegger
[PATCH net-next v4 1/3] can: mscan: fix improper return if dlc < 8 in start_xmi...
Amit Kumar Salecha
[PATCHv3 NEXT 2/2] NET: Add Qlogic ethernet driver for CNA devices
openbsd-misc
:
Theo de Raadt
Re: Old IPSEC bug
Tomáš Bodžár
Problem with vpnc connection - check group password !
Insan Praja SW
Mandoc Compiling Error
Carl Roberso
Re: Cannot change MTU of carp interface?
Richard Daemon
Re: booting openbsd on eee without cd-rom
Colocation donated by:
Syndicate