Re: [Keyrings] [PATCH] Keys: Add LSM hooks for key management

[David Howells]

James Morris <jmorris@xxxxxxxxx> wrote:

> > > > Should I expand the permissions mask to include a setattr?
> > > 
> > > Possibly for setperm and chown.
> > 
> > For setperm?
> 
> It changes an attribute of a key, for which you have DAC checks, therefore 
> you could assume that we'd also want MAC checks.

Does it matter that you can take away your own permission to change the
permissions?

David
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/