Permission Checks

Recall that the kernel provides the generic permission checking function generic_permission, which allows for integration of a filesystem-specific handler for ACL checks. Indeed, Ext3 makes use of this option: The function ext3_permission (which is, in turn, called by the VFS layer when a permission check is requested) instructs generic_permission to use ext3_check_acl for the ACL-related work:

fs/ext3/acl.c int ext3_permission(struct inode *inode, int mask, struct nameidata *nd) {

return generic_permission(inode, mask, ext3_check_acl);

Continue reading here: Summary

Was this article helpful?

0 0