Re: [PATCH 01/10] security: Override creds in __fput() with last fputter's creds [ver #3]

From: David Howells
Date: Thu Jun 06 2019 - 11:10:30 EST


Andy Lutomirski <luto@xxxxxxxxxxxxxx> wrote:

> > So that the LSM can see the credentials of the last process to do an fput()
> > on a file object when the file object is being dismantled, do the following
> > steps:
> >
>
> I still maintain that this is a giant design error.

Yes, I know. This was primarily a post so that Greg could play with the USB
notifications stuff I added. The LSM support isn't resolved and is unchanged.

> Can someone at least come up with a single valid use case that isn't
> entirely full of bugs?

"Entirely full of bugs"?

How would you propose I deal with Casey's requirement? I'm getting the
feeling you're going to nak it if I try to fulfil that and he's going to nak
it if I don't.

David