Lustre devel - Jun 2008 - security_inode_unlink in obdfilter.

Hello list,

Is anybody know - why filter use this function in
filter_vfs_unlink?
>From my point view this only add Selinux checks for OST objects, but ost
not set any selinux context for object and this do nothing.
I see only one possible variant for usage are log events via audit log.
Is we really need this?

-- 
Alex Lyashkov <Alexey.lyashkov at sun.com>
Lustre Group, Sun Microsystems

On Jun 18, 2008  20:12 +0300, Alexey Lyashkov wrote:
> Is anybody know - why filter use this function in filter_vfs_unlink?
> >From my point view this only add Selinux checks for OST objects, but
ost
> not set any selinux context for object and this do nothing.
> I see only one possible variant for usage are log events via audit log.
> Is we really need this?
This is just to keep filter_vfs_unlink() the same as vfs_unlink(),
to be consistent in case SELinux or other security framework is in
place.  If SELinux is NOT in use, then it just ends up as a no-op.

Cheers, Andreas
--
Andreas Dilger
Sr. Staff Engineer, Lustre Group
Sun Microsystems of Canada, Inc.