Re: [PATCH] BSD Secure Levels: claim block dev in file struct rather than inode struct, 2.6.11-rc2-mm1 (3/8)

From: Valdis . Kletnieks
Date: Tue Feb 08 2005 - 12:49:19 EST


On Tue, 08 Feb 2005 11:24:50 CST, Michael Halcrow said:

> While the program is waiting for a keystroke, mount the block device.
> Enter a keystroke. The result without the patch is 1, which is a
> security violation. This occurs because the bd_release function will
> bd_release(bdev) and set inode->i_security to NULL on the close(fd1).

Sounds like a bug, not a feature. Should it be zeroing out inode->i_security
for an inode with a non-zero reference count?

Attachment: pgp00000.pgp
Description: PGP signature