diff options
| author | Casey Schaufler <casey@schaufler-ca.com> | 2010-12-02 06:43:39 -0800 |
|---|---|---|
| committer | Casey Schaufler <casey@schaufler-ca.com> | 2010-12-02 06:43:39 -0800 |
| commit | 676dac4b1bee0469d6932f698aeb77e8489f5861 (patch) | |
| tree | 196b4cb35cf8dfdff0698dc4368cfd00acc7391a /init | |
| parent | 93ae86e759299718c611bc543b9b1633bf32905a (diff) | |
| download | op-kernel-dev-676dac4b1bee0469d6932f698aeb77e8489f5861.zip op-kernel-dev-676dac4b1bee0469d6932f698aeb77e8489f5861.tar.gz | |
This patch adds a new security attribute to Smack called
SMACK64EXEC. It defines label that is used while task is
running.
Exception: in smack_task_wait() child task is checked
for write access to parent task using label inherited
from the task that forked it.
Fixed issues from previous submit:
- SMACK64EXEC was not read when SMACK64 was not set.
- inode security blob was not updated after setting
SMACK64EXEC
- inode security blob was not updated when removing
SMACK64EXEC
Diffstat (limited to 'init')
0 files changed, 0 insertions, 0 deletions
