41a2d57516
Adds an ignore case for kernel tasks, so that they can access all resources. Since kernel worker threads are spawned with floor label, they are severely restricted by Smack policy. It is not an issue without onlycap, as these processes also run with root, so CAP_MAC_OVERRIDE kicks in. But with onlycap turned on, there is no way to change the label for these processes. Signed-off-by: Roman Kubiak <r.kubiak@samsung.com> Acked-by: Casey Schaufler <casey@schaufler-ca.com> |
||
|---|---|---|
| .. | ||
| Kconfig | ||
| Makefile | ||
| smack.h | ||
| smack_access.c | ||
| smack_lsm.c | ||
| smack_netfilter.c | ||
| smackfs.c | ||