Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752843AbbEKIMz (ORCPT ); Mon, 11 May 2015 04:12:55 -0400 Received: from mailout1.samsung.com ([203.254.224.24]:43773 "EHLO mailout1.samsung.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752506AbbEKIMv (ORCPT ); Mon, 11 May 2015 04:12:51 -0400 MIME-version: 1.0 Content-type: text/plain; charset=EUC-KR X-AuditID: cbfee691-f79ca6d00000456a-75-555064728be1 Content-transfer-encoding: 8BIT Message-id: <55506470.70109@samsung.com> Date: Mon, 11 May 2015 17:12:32 +0900 From: Seung-Woo Kim Reply-to: sw0312.kim@samsung.com User-Agent: Mozilla/5.0 (X11; Linux i686; rv:16.0) Gecko/20121011 Thunderbird/16.0.1 To: Seung-Woo Kim Cc: linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org, casey@schaufler-ca.com, sumit.semwal@linaro.org, linaro-mm-sig@lists.linaro.org Subject: Re: [RESEND PATCH] Smack: ignore private inode for smack_file_receive References: <1429251904-1078-1-git-send-email-sw0312.kim@samsung.com> In-reply-to: <1429251904-1078-1-git-send-email-sw0312.kim@samsung.com> X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrOIsWRmVeSWpSXmKPExsWyRsSkULcoJSDUoPmctsW9bb/YLL5cechk cXnXHDaLDz2P2CxO3f3MbjFj8ks2BzaPO9f2sHnc/veY2aNvyypGj6P7F7F5fN4kF8AaxWWT kpqTWZZapG+XwJWx+XxVwRbOiktL/rA2MJ5h72Lk5JAQMJH4+3UbM4QtJnHh3nq2LkYuDiGB pYwSzbs3MMIU9SxYCdYgJLCIUeLhekEQm1dAUOLH5HssXYwcHMwC8hJHLmWDhJkFNCSmvj7N CDHnAaPEt2lH2SHqNSQ2L1sGNpNFQFVi9edpYHE2AR2J/Ut+s0LMV5C4MvEYO8hMUYEwiZ2b 00HCIgJaEu3rbjGBzGQWmMUo0d5xD+xoYQE/iaUX/7FA9LpK3F+zHGwOp4CbRP/Fh2DPSAhc Y5f4O+EpO8RiAYlvkw+BHS0hICux6QDU85ISB1fcYJnAKD4LyWuzEF6bheS1BYzMqxhFUwuS C4qT0otM9YoTc4tL89L1kvNzNzEC4+/0v2cTdzDeP2B9iFGAg1GJh7fjkn+oEGtiWXFl7iFG U6AjJjJLiSbnA6M8ryTe0NjMyMLUxNTYyNzSTEmcV0f6Z7CQQHpiSWp2ampBalF8UWlOavEh RiYOTqkGxsJf2eby17ZdbF1xRfnUsQV/nrzQe+m/+5p8kJtbpv+OPoXG1bGGH7Mls+McXhRc /T5r0oyWQ3If7K8avcjO7hdZdfbkXDXLh9wa0UFV/RwZ8d/FF9ZmBi7tXViv0cFakvQroJr/ 8QSRxC/f3h88EXKNSZJDn+mgXKOiTJ6afWzNhaLpDaZLlFiKMxINtZiLihMB+/U3e7oCAAA= X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrIIsWRmVeSWpSXmKPExsVy+t9jAd2ilIBQg0dN6hb3tv1is/hy5SGT xeVdc9gsPvQ8YrM4dfczu8WMyS/ZHNg87lzbw+Zx+99jZo++LasYPY7uX8Tm8XmTXABrVAOj TUZqYkpqkUJqXnJ+SmZeuq2Sd3C8c7ypmYGhrqGlhbmSQl5ibqqtkotPgK5bZg7QCUoKZYk5 pUChgMTiYiV9O0wTQkPcdC1gGiN0fUOC4HqMDNBAwhrGjM3nqwq2cFZcWvKHtYHxDHsXIyeH hICJRM+ClVC2mMSFe+vZQGwhgUWMEg/XC4LYvAKCEj8m32PpYuTgYBaQlzhyKRskzCygITH1 9WnGLkYuoPIHjBLfph1lh6jXkNi8bBkjiM0ioCqx+vM0sDibgI7E/iW/WSHmK0hcmXiMHWSm qECYxM7N6SBhEQEtifZ1t5hAZjILzGKUaO+4xwySEBbwk1h68R8LRK+rxP01y8HmcAq4SfRf fMg2gVFwFpJTZyGcOgvJqQsYmVcxiqYWJBcUJ6XnGukVJ+YWl+al6yXn525iBEf3M+kdjKsa LA4xCnAwKvHwGlzwDxViTSwrrsw9xCjBwawkwnvKKCBUiDclsbIqtSg/vqg0J7X4EKMp0KMT maVEk/OBiSevJN7Q2MTMyNLI3NDCyNhcSZz3ZL5PqJBAemJJanZqakFqEUwfEwenVAPjeq4X x/8wrPLefiJ7z36HG55FQi/PVJdarvCR2KxswnZlQf1Xrzl3jlystWc58fOXh5fYyvxJzq7X NThuaHo5LlpR5LE0/6zdVrm02f0VZfZsX0V155iKr1r+ZbLfp8x6phIuDuG2WK1+EbmkBW9U LWcJmZjy3Vhe+1Gb68CEWZ/0aiPv3CpSYinOSDTUYi4qTgQAyhDykwQDAAA= DLP-Filter: Pass X-MTR: 20000000000000000@CPGS X-CFilter-Loop: Reflected Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1412 Lines: 42 Ping? On 2015?? 04?? 17?? 15:25, Seung-Woo Kim wrote: > The dmabuf fd can be shared between processes via unix domain > socket. The file of dmabuf fd is came from anon_inode. The inode > has no set and get xattr operations, so it can not be shared > between processes with smack. This patch fixes just to ignore > private inode including anon_inode for smack_file_receive. > > Signed-off-by: Seung-Woo Kim > --- > I think there was some issue sending my previous mail, so I resend patch again. > --- > security/smack/smack_lsm.c | 3 +++ > 1 files changed, 3 insertions(+), 0 deletions(-) > > diff --git a/security/smack/smack_lsm.c b/security/smack/smack_lsm.c > index 69fdc38..d1bb411 100644 > --- a/security/smack/smack_lsm.c > +++ b/security/smack/smack_lsm.c > @@ -1673,6 +1673,9 @@ static int smack_file_receive(struct file *file) > struct smk_audit_info ad; > struct inode *inode = file_inode(file); > > + if (unlikely(IS_PRIVATE(inode))) > + return 0; > + > smk_ad_init(&ad, __func__, LSM_AUDIT_DATA_PATH); > smk_ad_setfield_u_fs_path(&ad, file->f_path); > /* > -- Seung-Woo Kim Samsung Software R&D Center -- -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/