[Toybox] integration of SMACK
Hyejin Kim
hj8296 at gmail.com
Thu May 21 03:21:05 PDT 2015
Hi. Rob
I checked your changes ( New header is created. lib/lsm.h) on _Tizen
Emulator_
And ls puts right smack label with -Z option.
But there is a minor issue regarding spacing and alignment.
For example, doing "toybox ls -alZ"
There is no spacing between groupowner and smack label.
Further, other conjuction of options with Z causes spacing or alignment
issue.
plz, check if you have time.
On Mon, May 18, 2015 at 2:58 AM, José Bollo <jobol at nonadev.net
<http://lists.landley.net/listinfo.cgi/toybox-landley.net>> wrote:
>* Le mercredi 13 mai 2015 à 14:15 -0700, enh a écrit :
*>* (snip)
*>>>>* To be correct, from my cp man page, I see that "-p" is same as
*>>* "--preserve=mode,ownership,timestamps" and that
*>>* "--preserve[=ATTR_LIST]"
*>>* accepts the attributes: "context", "links", "xattr", "mode",
*>>* "ownership", "timestamps", and "all".
*>>>>>>* coincidentally, someone on Android asked for cp --preserve this week.
*>>* internal bug 21121352. i'll get around to that at some point if no one
*>>* beats me to it (but not before Google I/O).
*>>* Hi Elliott, hi all,
*>>* I worked a lot last Wednesday on implementing "cp --preserve". It works
*>* quiet well now on my side. I planned to finalize it this Monday.
*>>* So let me know if you already made some effort on your side.
*>>* I need advise about how to write a good test of cp for toybox
*
I threw this on the todo list but if somebody beats me to it...
Speaking of which, here are some notes from yesterday (results already
checked in) about banging on ls:
-----
The S_ISLNK() stanza is an abomination. I realize that you need to do this,
but let's be honest: this is a bug workaround for kernel problems stemming
from the fact that these APIs haven't been updated since the 1990's.
Either there should be a getfileconat() or fgetfilecon() should work
on O_PATH filehandles.
Why is |O_NOATIME commented out here? The man page says it was introduced in
2.6.8, git annotate says openat() was introduced 2.6.16 (which was 2006
and we depend on posix-2008...)
Ah, I see:
#ifdef __USE_GNU
# define O_DIRECT 040000 /* Direct disk access. */
# define O_NOATIME 01000000 /* Do not set atime. */
# define O_PATH 010000000 /* Resolve pathname but do not open file. */
#endif
Once again, the linux kernel is not a part of the gnu project and the glibc
developers didn't get that. Right, easy to fix up in portability.h.
And why does this have O_NONBLOCK? We're recursing down into directories
using openat() without that. Does this mean something in an selinux or
smack context?
The label: and totals: behavior is funky.
"ls -s" and "ls -sd *" differ, the first prints totals: the second doesn't
because total: is only on contents of a directory - posix
Fix fix fix...
-----
And here are notes from Jose's socket update patch:
I don't think this covers all the cases. What about symlink to a socket
without -L, or symlink to a file we haven't got permission to open? In
those cases we need the "follow symlink but do it by path because O_PATH
is broken" version?
Also, if O_PATH worked, we wouldn't need O_NONBLOCK to avoid triggering
automounting. (Is automounting still a thing in 2015?)
P.S. I pulled your "other fix" by taking the actual commit, see
git f25d4954a786.
Rob
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.landley.net/pipermail/toybox-landley.net/attachments/20150521/d91dba14/attachment-0001.htm>
More information about the Toybox
mailing list