On Tuesday 29 May 2007 22:47, Tetsuo Handa wrote: > AppArmor can't determine which pathname (/tmp/public/file or > /tmp/secret/file) was requested by touch command if bound mount is used in > the following way > > # mkdir /tmp/public /tmp/secret > # mount -t tmpfs none /tmp/public > # mount --bind /tmp/public /tmp/secret > # touch /tmp/public/file > > because security_inode_create() doesn't receive vfsmount, can it?
I don't know what you are talking about -- the very first patch in the AppArmor series adds the vfsmount parameter to security_inode_create(). Andreas - To unsubscribe from this list: send the line "unsubscribe linux-security-module" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
