Re: [PATCH][SELINUX] Fix selinux_inode_setattr hook

2005-02-04 Thread Chris Wright
* Stephen Smalley ([EMAIL PROTECTED]) wrote: > This patch against 2.6.11-rc3 fixes the selinux_inode_setattr hook > function to honor the ATTR_FORCE flag, skipping any permission checking > in that case. Otherwise, it is possible though unlikely for a denial > from the hook to prevent proper updat

Re: [PATCH][SELINUX] Fix selinux_inode_setattr hook

2005-02-04 Thread Stephen Smalley
On Fri, 2005-02-04 at 13:14, Chris Wright wrote: > * Stephen Smalley ([EMAIL PROTECTED]) wrote: > > This patch against 2.6.11-rc3 fixes the selinux_inode_setattr hook > > function to honor the ATTR_FORCE flag, skipping any permission checking > > in that case. Otherwise, it is possible though unli

Re: [PATCH][SELINUX] Fix selinux_inode_setattr hook

2005-02-04 Thread Chris Wright
* Stephen Smalley ([EMAIL PROTECTED]) wrote: > On Fri, 2005-02-04 at 13:14, Chris Wright wrote: > > * Stephen Smalley ([EMAIL PROTECTED]) wrote: > > > This patch against 2.6.11-rc3 fixes the selinux_inode_setattr hook > > > function to honor the ATTR_FORCE flag, skipping any permission checking > >

[PATCH][SELINUX] Fix selinux_inode_setattr hook

2005-02-04 Thread Stephen Smalley
This patch against 2.6.11-rc3 fixes the selinux_inode_setattr hook function to honor the ATTR_FORCE flag, skipping any permission checking in that case. Otherwise, it is possible though unlikely for a denial from the hook to prevent proper updating, e.g. for remove_suid upon writing to a file. Th