[RFC v0.1][PATCH] selinuxns: extend namespace support to security.selinux xattrs

James Morris james.l.morris at oracle.com
Wed Nov 1 06:40:00 UTC 2017


On Tue, 31 Oct 2017, Stephen Smalley wrote:

> This btw would be a bit cleaner if we dropped the .ns. portion of the
> name, such that we would have:
> security.selinux # xattr name in the init namespace
> security.selinux.vmN # xattr name in the vmN namespace
> security.selinux.vmN.vmM # xattr name in the vmN.vmM namespace

I used 'ns' to diffetentiate against other potential extensions of the 
xattr name.  If that's not a concern, then yes it will be cleaner.

Do we limit the number of nestings?


-- 
James Morris
<james.l.morris at oracle.com>

--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html



More information about the Linux-security-module-archive mailing list