Re: Another slab size-32 leak 2.6.16-rc4-mm2

The discussion in this thread by Stephan Mueller and Stephen Smalley covers this already, here's my two cents. We have the following separate requirements: a) [CAPP and LSPP]: audit the object identity - this happens always since it's an integer argument to the IPC call and automatically saved by syscall audit. b) [CAPP and LSPP]: save additional data from system call pointer arguments - this is only needed for *ctl() calls that change permissions or other security attributes. I think that was the topic of discussion back in October. c) [LSPP]: save the subject label - I think this also happens automatically. d) [LSPP]: save the object label - that's what all the extra hooks are needed for, since that's required for all operations on IPC objects. (Also information flow decisions but that is mostly equivalent here). I like Stephen's proposal to handle (d) from the SELinux hook, since that's relevant for LSPP systems only, and this way it avoids intrusive changes to the IPC code. (a) and (b) should still keep working in CAPP systems without SELinux enabled.