Re: security_inode_init_security() inode field requirements

2013-03-03 Thread Casey Schaufler
On 3/1/2013 2:12 AM, Steven Whitehouse wrote: > Hi, > > I'm wondering whether there is a list somewhere of fields which > security_inode_init_security() requires are set in an inode when it is > called? In particular, does it matter if the inode number itself is > unset when security_inode_init_sec

Re: security_inode_init_security() inode field requirements

2013-03-01 Thread Steven Whitehouse
Hi, On Fri, 2013-03-01 at 10:13 -0500, Eric Paris wrote: > SELinux has no maximum :-( > > Realistically there are a couple of interfaces that limit things to > 4k, but labels on files on disk could be even larger than that! > > 255 will fit most every label, but not necessarily all of them. >

Re: security_inode_init_security() inode field requirements

2013-03-01 Thread Eric Paris
SELinux has no maximum :-( Realistically there are a couple of interfaces that limit things to 4k, but labels on files on disk could be even larger than that! 255 will fit most every label, but not necessarily all of them. I know ext4 on Fedora allocates inodes which left about 255 bytes for

Re: security_inode_init_security() inode field requirements

2013-03-01 Thread Mimi Zohar
On Fri, 2013-03-01 at 13:11 +, Steven Whitehouse wrote: > Hi, > > On Fri, 2013-03-01 at 07:27 -0500, Mimi Zohar wrote: > > On Fri, 2013-03-01 at 10:12 +, Steven Whitehouse wrote: > > > Hi, > > > > > > I'm wondering whether there is a list somewhere of fields which > > > security_inode_ini

Re: security_inode_init_security() inode field requirements

2013-03-01 Thread Steven Whitehouse
Hi, On Fri, 2013-03-01 at 07:27 -0500, Mimi Zohar wrote: > On Fri, 2013-03-01 at 10:12 +, Steven Whitehouse wrote: > > Hi, > > > > I'm wondering whether there is a list somewhere of fields which > > security_inode_init_security() requires are set in an inode when it is > > called? In particul

Re: security_inode_init_security() inode field requirements

2013-03-01 Thread Mimi Zohar
On Fri, 2013-03-01 at 10:12 +, Steven Whitehouse wrote: > Hi, > > I'm wondering whether there is a list somewhere of fields which > security_inode_init_security() requires are set in an inode when it is > called? In particular, does it matter if the inode number itself is > unset when security

security_inode_init_security() inode field requirements

2013-03-01 Thread Steven Whitehouse
Hi, I'm wondering whether there is a list somewhere of fields which security_inode_init_security() requires are set in an inode when it is called? In particular, does it matter if the inode number itself is unset when security_inode_init_security() is called? The problem that I'm looking at is th