Re: [PATCH] ACL supports to mqueue

From: Zhou Peng
Date: Tue Nov 01 2011 - 22:37:42 EST


Sorry for late reply, the mail skiped the inbox
and to the lkml label directly of gmail.
On Fri, Oct 28, 2011 at 7:47 AM, James Morris <jmorris@xxxxxxxxx> wrote:
> On Thu, 27 Oct 2011, James Morris wrote:
>
>> On Tue, 25 Oct 2011, Zhou Peng wrote:
>>
>> > Hi, how about this patch pls?
>>
>> I'm not convinced that this is a necessary feature for the mainline
>> kernel.
>
> It also needs more review, from at least other security folk, and ideally
> also from fs/vfs folk.
Thank you James.
I cc to Alexander Viro (VFS),
Chris Wright (LSM),
Hugh Dickins (TMPFS),
Stephen Smalley (SELINUX),
Kentaro Takeda, Tetsuo Handa (TOMOYO),
John Johansen (APPARMOR)
Hope any review
> Why does NFSARK want this supportr?  Are its users asking for it?  (I
> couldn't find the distro, btw).
Yes, it's user asks for acl for ipc,
It is a distro by nfschina.
>>
>> >
>> > On Fri, Oct 21, 2011 at 6:46 PM, Zhou Peng <ailvpeng25@xxxxxxxxx> wrote:
>> > > * In general, it can give a more fine grained and flexible DAC to msg queue obj.
>> > > * NFSARK(A distro) wants all posix ipc objects to support ACL, including mqueue.
>> > > * Posix semphore and shmem both support ACL, but mqueue as one of the
>> > > three basic ipc doesn't.
>> > > * At least, it may save one note sentence for MQ_OVERVIEW(7)   ^_^
>> > >    "Linux does not currently (2.6.26) support the use of access
>> > > control lists (ACLs) for POSIX message queues."
>> > >    http://www.kernel.org/doc/man-pages/online/pages/man7/mq_overview.7.html
>> > >
>> > > On Thu, Oct 20, 2011 at 11:33 PM, James Morris <jmorris@xxxxxxxxx> wrote:
>> > > > On Thu, 20 Oct 2011, Zhou Peng wrote:
>> > > >
>> > > >> This patch adds ACL supports to mqueue filesystem.
>> > > >> Based on Linux 3.0.4.
>> > > >
>> > > > Why is this necessary, and who is planning to use it?
>> > > >
>> > > > Are any distros likely to enable this?

--
Zhou Peng
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/