Techwizz/kernel-fxtec-pro1x
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
kernel-fxtec-pro1x/security/tomoyo
History
Tetsuo Handa 731d37aa70 TOMOYO: Allow domain transition without execve(). 
To be able to split permissions for Apache's CGI programs which are executed
without execve(), add special domain transition which is performed by writing
a TOMOYO's domainname to /sys/kernel/security/tomoyo/self_domain interface.

This is an API for TOMOYO-aware userland applications. However, since I expect
TOMOYO and other LSM modules to run in parallel, this patch does not use
/proc/self/attr/ interface in order to avoid conflicts with other LSM modules
when it became possible to run multiple LSM modules in parallel.

Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>
2011-09-14 08:27:06 +10:00
..
audit.c TOMOYO: Allow controlling generation of access granted logs for per an entry basis. 2011-09-14 08:27:06 +10:00
common.c TOMOYO: Allow domain transition without execve(). 2011-09-14 08:27:06 +10:00
common.h TOMOYO: Allow domain transition without execve(). 2011-09-14 08:27:06 +10:00
condition.c TOMOYO: Allow controlling generation of access granted logs for per an entry basis. 2011-09-14 08:27:06 +10:00
domain.c TOMOYO: Allow controlling generation of access granted logs for per an entry basis. 2011-09-14 08:27:06 +10:00
environ.c TOMOYO: Add environment variable name restriction support. 2011-09-14 08:27:05 +10:00
file.c TOMOYO: Update kernel-doc. 2011-07-14 17:50:03 +10:00
gc.c TOMOYO: Add socket operation restriction support. 2011-09-14 08:27:05 +10:00
group.c TOMOYO: Add socket operation restriction support. 2011-09-14 08:27:05 +10:00
Kconfig TOMOYO: Add socket operation restriction support. 2011-09-14 08:27:05 +10:00
load_policy.c TOMOYO: Update kernel-doc. 2011-07-14 17:50:03 +10:00
Makefile TOMOYO: Add socket operation restriction support. 2011-09-14 08:27:05 +10:00
memory.c TOMOYO: Update kernel-doc. 2011-07-14 17:50:03 +10:00
mount.c TOMOYO: Update kernel-doc. 2011-07-14 17:50:03 +10:00
network.c TOMOYO: Add socket operation restriction support. 2011-09-14 08:27:05 +10:00
realpath.c TOMOYO: Add socket operation restriction support. 2011-09-14 08:27:05 +10:00
securityfs_if.c TOMOYO: Allow domain transition without execve(). 2011-09-14 08:27:06 +10:00
tomoyo.c TOMOYO: Add socket operation restriction support. 2011-09-14 08:27:05 +10:00
util.c TOMOYO: Allow domain transition without execve(). 2011-09-14 08:27:06 +10:00