Re: [apparmor] [RFC PATCH 1/6] fs: invoke LSM file_open hook in do_dentry_open for O_PATH fds as well

2025-03-13 Thread Paul Moore
On Thu, Mar 13, 2025 at 4:50 AM Christian Brauner wrote: > On Wed, Mar 12, 2025 at 09:37:14PM +, Al Viro wrote: > > On Wed, Mar 12, 2025 at 02:21:41PM -0700, Ryan Lee wrote: > > > Currently, opening O_PATH file descriptors completely bypasses the LSM > > > infrastructure. Invoking the LSM file

Re: [apparmor] [RFC PATCH 1/6] fs: invoke LSM file_open hook in do_dentry_open for O_PATH fds as well

2025-03-13 Thread Christian Brauner
On Wed, Mar 12, 2025 at 09:37:14PM +, Al Viro wrote: > On Wed, Mar 12, 2025 at 02:21:41PM -0700, Ryan Lee wrote: > > Currently, opening O_PATH file descriptors completely bypasses the LSM > > infrastructure. Invoking the LSM file_open hook for O_PATH fds will > > be necessary for e.g. mediating