On Mon, Jan 06, 2003 at 08:37:23AM -0800, David Schultz wrote: +> You still haven't explained exactly what you're trying to do, but +> you may wish to look into Niels Provos' Systrace. It should give +> you a good example of how to do system call interposition in the +> kernel, and it has been ported to all three BSDs. +> +> http://www.citi.umich.edu/u/provos/systrace/ +> +> It sounds like you're trying to do something complicated with +> chdir, and that could make things harder. First of all, you +> should be comparing vnodes instead of pathnames when possible, in +> order to avoid canonicalization bugs. Second, it only makes sense +> to ask for the path of a directory vnode, since ordinary files can +> have multiple hard links. For directories, you can get the full +> path by walking up the '..' pointers, sort of like vn_fullpath(), +> except that you have to do a lookup if something is missing from +> the cache. I expect locking would be a pain as well.
Yes, I know that already. Soon I'll send announce of what I'm doing, for now I'll use my ugly way. Not always is chance to operate only on vnodes. When You (for example) want to denied mode changes for some file, You can do this through catching chmod(2), but when someone open this file how You get file name when You want create policy rules for fchmod(2)? Remember that files could have temporary names, so You can't compare vnode from file descriptor with some file that You're expecting. PS. No comments about systrace... ever. -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hackers" in the body of the message
