From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1756868Ab2EPQKW (ORCPT ); Wed, 16 May 2012 12:10:22 -0400 Received: from mail-we0-f174.google.com ([74.125.82.174]:62495 "EHLO mail-we0-f174.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1756257Ab2EPQKU (ORCPT ); Wed, 16 May 2012 12:10:20 -0400 MIME-Version: 1.0 In-Reply-To: <1337183225.3522.14.camel@falcor> References: <1336963631-3541-1-git-send-email-zohar@us.ibm.com> <1337112446.20904.50.camel@falcor> <20120516004251.GO22082@ZenIV.linux.org.uk> <1337175731.2492.4.camel@localhost> <1337176336.3522.5.camel@falcor> <1337183225.3522.14.camel@falcor> From: Linus Torvalds Date: Wed, 16 May 2012 09:09:58 -0700 X-Google-Sender-Auth: MZTVFeCoN7UEk5DZu4nFp5PkCf8 Message-ID: Subject: Re: [PATCH] vfs: fix IMA lockdep circular locking dependency To: Mimi Zohar Cc: Eric Paris , James Morris , Al Viro , Mimi Zohar , linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org Content-Type: text/plain; charset=ISO-8859-1 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, May 16, 2012 at 8:47 AM, Mimi Zohar wrote: > > The default > today, without LSM enabled, is to call the cap functions directly from > the security stub functions, .. I wouldn't call that the default actually: the default today is pretty much whatever "makes sense". A *lot* of them just do "return 0" (or, for the ones without a return value, nothing at all). In fact, I think it's most of them by far. Some of them return errors (-EOPNOTSUPP). So really only for a small subset of the simple cases do the security wrapper inlines call the cap functions directly. Those simple cases tend to happen to be at the top of the list, though, so it may seem more common at first glance than it actually is. Linus