Message-ID: <413A1240.3030405@cs.aau.dk>
Date: Sat, 04 Sep 2004 21:06:40 +0200
From: =?ISO-8859-1?Q?Kristian_S=F8rensen?= <ks@cs.aau.dk>
User-Agent: Mozilla Thunderbird 0.7.3 (X11/20040814)
MIME-Version: 1.0
To: Horst von Brand <vonbrand@inf.utfsm.cl>
Cc: umbrella-devel@lists.sourceforge.net,
       Linux Kernel Mailing List <linux-kernel@vger.kernel.org>
Subject: Re: [Umbrella-devel] Re: Getting full path from dentry in LSM hooks
References: <200409040241.i842fZxa003725@localhost.localdomain>
In-Reply-To: <200409040241.i842fZxa003725@localhost.localdomain>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 1168
Lines: 25

Just forgot something:

Horst von Brand wrote:
>>                                                  furthermore, you could 
>>specify that attachments executed _from_ the emailprogram would not have 
>>access to the network.
> 
> 
> I.e., no child of the email program could access the network, not even to
> answer a message. Sounds restrictive.
You misunderstood this. The restrictions are introduced by a "restricted 
fork", to which you specify the restrictions the mext process should 
have + those inherited from the parent. So if you execute an attachment 
from the thread that views the email, THIS should be restricted from 
e.g. addressbook and network.

Anyway, when you answer a message - in most cases you put the message in 
an "outbox", which the main thread of the mail program sends, when told 
to, and as the main thread is not restricted from the network 
(supprise!) it will succeed in sending the mails.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/