Re: [Keyrings] [PATCH] Keys: Add LSM hooks for key management

From: James Morris
Date: Fri Oct 07 2005 - 09:06:07 EST


On Fri, 7 Oct 2005, David Howells wrote:

> James Morris <jmorris@xxxxxxxxx> wrote:
>
> > > > > Should I expand the permissions mask to include a setattr?
> > > >
> > > > Possibly for setperm and chown.
> > >
> > > For setperm?
> >
> > It changes an attribute of a key, for which you have DAC checks, therefore
> > you could assume that we'd also want MAC checks.
>
> Does it matter that you can take away your own permission to change the
> permissions?

Not that I'm aware of.


- James
--
James Morris
<jmorris@xxxxxxxxx>
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/