Bug#770492: [RFC PATCH RESEND] vfs: Move security_inode_killpriv() after permission checks

2015-01-21 Thread Casey Schaufler
On 1/21/2015 6:03 AM, Stephen Smalley wrote: > On 01/20/2015 06:17 PM, James Morris wrote: >> On Sat, 17 Jan 2015, Ben Hutchings wrote: >> >>> chown() and write() should clear all privilege attributes on >>> a file - setuid, setgid, setcap and any other extended >>> privilege attributes. >>> >>> Ho

Bug#770492: [RFC PATCH RESEND] vfs: Move security_inode_killpriv() after permission checks

2015-01-20 Thread Casey Schaufler
On 1/20/2015 3:17 PM, James Morris wrote: > On Sat, 17 Jan 2015, Ben Hutchings wrote: > >> chown() and write() should clear all privilege attributes on >> a file - setuid, setgid, setcap and any other extended >> privilege attributes. >> >> However, any attributes beyond setuid and setgid are manag

Re: [RFC] Simplifying kernel configuration for distro issues

2012-07-13 Thread Casey Schaufler
On 7/13/2012 1:37 PM, Linus Torvalds wrote: > So this has long been one of my pet configuration peeves: as a user I > am perfectly happy answering the questions about what kinds of > hardware I want the kernel to support (I kind of know that), but many > of the "support infrastructure" questions ar