On Thu, Aug 23, 2012 at 05:16:47PM +0800, jinxiu su wrote:
> Hi....I am su, a new linuxer.
> I am doing some development on linux security modules(LSM), and I use
> extended attribute to store the security information.
> But problems encountered..
> when the kernel module that I developed is working a long time ,the
> extended attribute of this file named /lib/ld-2.5.so lost.Exactly, it 's
> replace by zero.
> and in my kernel module ,there is a policy, when create a inode, the
> extended attribute will be initialized to zero. But when I check /lib/
> ld-2.5.so, the inode is not changed, exactly it's not a new inode. I am
> becoming confused....
> I think there must be some fatal bugs in my kernel module.But I am just
> wondering in which condition can make a file's extended attribute field
> to be replaced by zero? in which condition can make /lib/ld-2.5.so extended
> attribute to be zero?
No idea. What filesystem did this happen on, and what kernel? it
sounds like the attribute got deleted, or a system upgrade replaced
the file with a new, possibly identical version...