]> git.baikalelectronics.ru Git - kernel.git/commit
TOMOYO: Allow using executable's realpath and symlink's target as conditions.
authorTetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Fri, 8 Jul 2011 04:23:44 +0000 (13:23 +0900)
committerJames Morris <jmorris@namei.org>
Mon, 11 Jul 2011 01:05:33 +0000 (11:05 +1000)
commita0a79f341d453ad533f9242f229528831611f5fb
treeb9f6051059a2a90547a4501bf296b0cf3c9dbc76
parenta856e45d8e7e1a49df3ce507fd3c112dbe2b4e1d
TOMOYO: Allow using executable's realpath and symlink's target as conditions.

This patch adds support for permission checks using executable file's realpath
upon execve() and symlink's target upon symlink(). Hooks are in the last patch
of this pathset.

Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>
security/tomoyo/audit.c
security/tomoyo/common.c
security/tomoyo/common.h
security/tomoyo/condition.c
security/tomoyo/gc.c