Re: [PATCH 09/11] capsicum: implementations of new LSM hooks

2014-07-02 Thread David Drysdale
On Wed, Jul 2, 2014 at 2:49 PM, Paul Moore wrote: > On Monday, June 30, 2014 09:05:38 AM Andy Lutomirski wrote: >> On Mon, Jun 30, 2014 at 3:28 AM, David Drysdale wrote: >> > If the LSM does not provide implementations of the .file_lookup and >> > .file_install LSM hooks, always use the Capsicum

Re: [PATCH 09/11] capsicum: implementations of new LSM hooks

2014-07-02 Thread Paul Moore
On Monday, June 30, 2014 09:05:38 AM Andy Lutomirski wrote: > On Mon, Jun 30, 2014 at 3:28 AM, David Drysdale wrote: > > If the LSM does not provide implementations of the .file_lookup and > > .file_install LSM hooks, always use the Capsicum implementations. > > > > The Capsicum implementation of

Re: [PATCH 09/11] capsicum: implementations of new LSM hooks

2014-06-30 Thread Andy Lutomirski
On Mon, Jun 30, 2014 at 3:28 AM, David Drysdale wrote: > If the LSM does not provide implementations of the .file_lookup and > .file_install LSM hooks, always use the Capsicum implementations. > > The Capsicum implementation of file_lookup checks for a Capsicum > capability wrapper file and unwrap

[PATCH 09/11] capsicum: implementations of new LSM hooks

2014-06-30 Thread David Drysdale
If the LSM does not provide implementations of the .file_lookup and .file_install LSM hooks, always use the Capsicum implementations. The Capsicum implementation of file_lookup checks for a Capsicum capability wrapper file and unwraps to if the appropriate rights are available. The Capsicum imple