为了为 Linux 内核添加一些安全措施，我试图在 inode 结构中添加额外的标志。
如果为某个文件设置了这个标志，系统调用将检查它。
那么我如何才能访问知道其目录和/或其 inode 编号的文件的 inode 结构(可能通过指针)？
最佳答案
SELinux 提供 Hook 来添加基于 inode 访问的检查。查看标题为:Inode Hook Functions 的链接.
摘录
The SELinux inode hook function implementations manage the security fields of inode structures and perform access control for inode operations. Since inodes are used to represent pipes, files, and sockets, the hook functions must handle each of these abstractions. Furthermore, these hooks must handle multiple filesystem types, including both conventional disk-based filesystems like ext3 and pseudo filesystems like proc and tmpfs. This section begins by describing the inode hook functions for managing the security fields. It then discusses the inode hook functions for performing access control.
这是一个 good tutorial on getting started with SELinux .
引用资料
关于directory - 如何获取文件 inode 的指针，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/16442265/