Message-ID: <b452e0d0387e9350a5f8bb7fac242194.squirrel@webmail.xs4all.nl>
In-Reply-To: <20090926213528.GB23564@c.hsd1.tn.comcast.net>
References: <20090923005644.GA28244@c.hsd1.tn.comcast.net>
    <20090923213109.GA936@c.hsd1.tn.comcast.net>
    <4ABB9D6D.8000607@schaufler-ca.com>
    <20090925100630.GD10098@c.hsd1.tn.comcast.net>
    <4ABCEE71.6060703@schaufler-ca.com>
    <20090926213528.GB23564@c.hsd1.tn.comcast.net>
Date: Mon, 28 Sep 2009 07:38:55 +0200
Subject: Re: [RFC][PATCH] Privilege dropping security module
From: "Rob Meijer" <capibara@xs4all.nl>
To: "Andy Spencer" <andy753421@gmail.com>
Cc: "Casey Schaufler" <casey@schaufler-ca.com>,
       linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org
Reply-To: rmeijer@xs4all.nl
User-Agent: SquirrelMail/1.4.18
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7BIT
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 1035
Lines: 25

On Sat, September 26, 2009 23:35, Andy Spencer wrote:
>> It's amazing who much of this stuff there is to attend to.  If you
>> haven't, run checkpatch.py on your patches. You'll need to pass that
>> eventually.
>
> I've fixed the remaining things that checkpatch.pl suggests as well as a
> few others and will include those checks for future patches.
>
>
>> Hmm. You are working with the Linux DAC mechanism, even if only within
>> a process tree. You're not dropping privilege, you're applying a mask
>> to the file permission bits, currently for file system objects, and
>> with other objects (sysvipc at least) in the future. Hmm. modemask?
>> Something derived from "restricted process tree?"
>
> `Access Control Masking' or `Policy Masking' perhaps?
>

Or  'Permission Attenuation' ?

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/