[Virtio-fs] [RESEND] [PATCHv4 1/2] uapi: fuse: Add FUSE_SECURITY_CTX

Casey Schaufler casey at schaufler-ca.com
Fri Aug 14 15:44:47 UTC 2020


On 8/13/2020 10:20 PM, Chirantan Ekbote wrote:
> On Wed, Jul 22, 2020 at 6:09 PM Chirantan Ekbote <chirantan at chromium.org> wrote:
>> Add the FUSE_SECURITY_CTX flag for the `flags` field of the
>> fuse_init_out struct.  When this flag is set the kernel will append the
>> security context for a newly created inode to the request (create,
>> mkdir, mknod, and symlink).  The server is responsible for ensuring that
>> the inode appears atomically with the requested security context.
>>
>> For example, if the server is backed by a "real" linux file system then
>> it can write the security context value to
>> /proc/thread-self/attr/fscreate before making the syscall to create the
>> inode.
>>
> Friendly ping. Will this (and the next patch in the series) be merged into 5.9?

This really needed to go to the LSM List <linux-security-module at vger.kernel.org>.


>
> Chirantan
>
>
> Chirantan




More information about the Virtio-fs mailing list