4 ms·
I think the best would be to create an LSM module. I created one a while back but have not had time to complete it. I called it safename: https://github.com/da
by dwheeler 8y ago
I think the best would be to create an LSM module. I created one a while back but have not had time to complete it. I called it safename:
https://github.com/david-a-wheeler/linux/blob/squelch-1/security/safename/safename_lsm.c https://github.com/david-a-wheeler/linux/blob/squelch-1/secu...
- geofft 8y agoUnfortunately this wouldn't catch names from network filesystems, removable media, etc., which comes up fairly frequently. (Or, more generally, from existing disks.) Is there a place in the Linux kernel you can intervene on existing filesystems to escape bad names from existing filesystems and refuse the creation of new, unescaped bad names? Could this be something unionfs-ish?