Re: [PATCH v3] vfs: new O_NODE open flag

From: Alan Cox
Date: Mon Dec 07 2009 - 07:22:04 EST


The standard udev unload is a true open barrier so has an implicit
revoke() caused by the fact you cannot keep a handle to the filename open
during the udev sequence (or the old driver would be pinned by a refcount
and not unload).

This isn't about hard links, its about object and handle lifetimes.
Ownership is also involved in the case of things like a tty device (so if
you can fchmod down the handle you can break the security model).

It only works because you have a true revoke (by virtue of refcounting in
the kernel driver modules)

Alan
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/