Getting path in inode_permission
I need the path lookup data as I need to specifically block inode loopkups originating from a certain path(hence the permission mask is not enough). Is there a way to get it from inside the inode_permission hook or is there another hook I can use(not file_permission since I want the hook for any kind of access, not just read/writes) ? Regards, winged_elite
On Sat, 07 Feb 2015 01:57:44 +0530, noyb noybee said:
I need the path lookup data as I need to specifically block inode loopkups originating from a certain path
Then just make sure the inodes you don't want accessed aren't in the namespace. Hint: "from a certain path" is almost guaranteed to be a security hole, because all the attacker has to do is cwd() to some different path. And there's ../ games that can be played, and so on. So what are you trying to protect by blocking some lookups? What's the threat model here?
participants (2)
-
noyb noybee -
Valdis.Kletnieks＠vt.edu