diff options
| author | Rafal Krypa <r.krypa@samsung.com> | 2015-06-02 11:23:48 +0200 |
|---|---|---|
| committer | Casey Schaufler <casey@schaufler-ca.com> | 2015-06-02 11:53:42 -0700 |
| commit | c0d77c884461fc0dec0411e49797dc3f3651c31b (patch) | |
| tree | c526c2ae841b0fc358d29af69cddcdb63ae72431 /kernel | |
| parent | 01fa8474fba7e80f6a2ac31d0790385a993cb7ba (diff) | |
| download | op-kernel-dev-c0d77c884461fc0dec0411e49797dc3f3651c31b.zip op-kernel-dev-c0d77c884461fc0dec0411e49797dc3f3651c31b.tar.gz | |
Smack: allow multiple labels in onlycap
Smack onlycap allows limiting of CAP_MAC_ADMIN and CAP_MAC_OVERRIDE to
processes running with the configured label. But having single privileged
label is not enough in some real use cases. On a complex system like Tizen,
there maybe few programs that need to configure Smack policy in run-time
and running them all with a single label is not always practical.
This patch extends onlycap feature for multiple labels. They are configured
in the same smackfs "onlycap" interface, separated by spaces.
Signed-off-by: Rafal Krypa <r.krypa@samsung.com>
Diffstat (limited to 'kernel')
0 files changed, 0 insertions, 0 deletions
