[PATCH] exec: Set file unwritable before LSM check

Linus Torvalds torvalds at linux-foundation.org
Fri Mar 9 19:13:50 UTC 2018


On Fri, Mar 9, 2018 at 11:07 AM, Kees Cook <keescook at chromium.org> wrote:
> The LSM check should happen after the file has been confirmed to be
> unchanging. Without this, we could have a ToCToU issue between the
> LSM verification and the actual contents of the file later.

Can we please not add random crazy six-letter acronyms that nobody
uses outside of a very small community?

The point of a commit message is to *explain*, not confuse.

            Linus
--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html



More information about the Linux-security-module-archive mailing list