Re: [PATCH v4 6/7] selinux: Revalidate invalid inode security labels

2015-11-01 Thread Andreas Gruenbacher
Paul, On Sun, Nov 1, 2015 at 1:52 PM, Paul Moore wrote: > If you want, you can just post a > "8/7" patch with the extra calls added and I'll apply that on top of > the v4 patchset. I've also added the additional Acked-by headers, it's easiest to just repost (I just did). Thanks, Andreas -- To u

Re: [PATCH v4 6/7] selinux: Revalidate invalid inode security labels

2015-11-01 Thread Paul Moore
On Thu, Oct 29, 2015 at 12:52 PM, Andreas Gruenbacher wrote: > On Thu, Oct 29, 2015 at 4:21 PM, Stephen Smalley wrote: >> On 10/28/2015 08:47 PM, Andreas Gruenbacher wrote: >>> >>> When fetching an inode's security label, check if it is still valid, and >>> try reloading it if it is not. Reloadin

Re: [PATCH v4 6/7] selinux: Revalidate invalid inode security labels

2015-10-29 Thread Andreas Gruenbacher
David, On Thu, Oct 29, 2015 at 1:47 AM, Andreas Gruenbacher wrote: > When fetching an inode's security label, check if it is still valid, and > try reloading it if it is not. Reloading will fail when we are in RCU > context which doesn't allow sleeping, or when we can't find a dentry for > the in

Re: [PATCH v4 6/7] selinux: Revalidate invalid inode security labels

2015-10-29 Thread Andreas Gruenbacher
On Thu, Oct 29, 2015 at 4:21 PM, Stephen Smalley wrote: > On 10/28/2015 08:47 PM, Andreas Gruenbacher wrote: >> >> When fetching an inode's security label, check if it is still valid, and >> try reloading it if it is not. Reloading will fail when we are in RCU >> context which doesn't allow sleepi

Re: [PATCH v4 6/7] selinux: Revalidate invalid inode security labels

2015-10-29 Thread Stephen Smalley
On 10/28/2015 08:47 PM, Andreas Gruenbacher wrote: When fetching an inode's security label, check if it is still valid, and try reloading it if it is not. Reloading will fail when we are in RCU context which doesn't allow sleeping, or when we can't find a dentry for the inode. (Reloading happens

[PATCH v4 6/7] selinux: Revalidate invalid inode security labels

2015-10-28 Thread Andreas Gruenbacher
When fetching an inode's security label, check if it is still valid, and try reloading it if it is not. Reloading will fail when we are in RCU context which doesn't allow sleeping, or when we can't find a dentry for the inode. (Reloading happens via iop->getxattr which takes a dentry parameter.)