Return-Path: linux-nfs-owner@vger.kernel.org Received: from countercultured.net ([209.51.175.25]:37661 "HELO countercultured.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with SMTP id S1752923Ab3AXDsn (ORCPT ); Wed, 23 Jan 2013 22:48:43 -0500 Message-ID: <5100AF22.7070403@davequigley.com> Date: Wed, 23 Jan 2013 22:48:50 -0500 From: Dave Quigley MIME-Version: 1.0 To: "Myklebust, Trond" CC: Steve Dickson , "J. Bruce Fields" , Linux NFS Mailing list Subject: Re: [PATCH 01/14] Security: Add hook to calculate context based on a negative dentry. References: <1358862042-27520-1-git-send-email-steved@redhat.com> <1358862042-27520-2-git-send-email-steved@redhat.com> <4FA345DA4F4AE44899BD2B03EEEC2FA91833244F@sacexcmbx05-prd.hq.netapp.com> In-Reply-To: <4FA345DA4F4AE44899BD2B03EEEC2FA91833244F@sacexcmbx05-prd.hq.netapp.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Sender: linux-nfs-owner@vger.kernel.org List-ID: On 1/23/2013 1:31 PM, Myklebust, Trond wrote: > On Tue, 2013-01-22 at 08:40 -0500, Steve Dickson wrote: >> From: David Quigley >> >> There is a time where we need to calculate a context without the >> inode having been created yet. To do this we take the negative dentry and >> calculate a context based on the process and the parent directory contexts. >> >> Signed-off-by: Matthew N. Dodd >> Signed-off-by: Miguel Rodel Felipe >> Signed-off-by: Phua Eu Gene >> Signed-off-by: Khin Mi Mi Aung >> --- >> include/linux/security.h | 27 +++++++++++++++++++++++++++ >> security/capability.c | 8 ++++++++ >> security/security.c | 10 ++++++++++ >> security/selinux/hooks.c | 35 +++++++++++++++++++++++++++++++++++ >> 4 files changed, 80 insertions(+) > > Linus won't accept a patch that changes the security code from Bruce or > myself without acks from the security maintainers. I assume that means > we need to get at least an ack from James Morris, and then possibly > Stephen and Eric too... > > I have an email from James Morris saying that the changes should go through your tree. Should I get him to ack these patches so you can pass them through? Dave