]> git.baikalelectronics.ru Git - kernel.git/commit
apparmor: add special .null file used to "close" fds at exec
authorJohn Johansen <john.johansen@canonical.com>
Mon, 16 Jan 2017 08:42:45 +0000 (00:42 -0800)
committerJohn Johansen <john.johansen@canonical.com>
Mon, 16 Jan 2017 09:18:35 +0000 (01:18 -0800)
commit590383a3031791f33ba2acb1c30dbe6c67fd641c
tree4fc18f426bff2471c50b87c5b5c6df4749deee11
parentef785e2362deabb5424b439378b32b30457405a7
apparmor: add special .null file used to "close" fds at exec

Borrow the special null device file from selinux to "close" fds that
don't have sufficient permissions at exec time.

Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/apparmorfs.c
security/apparmor/include/apparmorfs.h
security/apparmor/include/policy_ns.h