]> git.baikalelectronics.ru Git - kernel.git/commit
Smack: bidirectional UDS connect check
authorCasey Schaufler <casey@schaufler-ca.com>
Thu, 10 Apr 2014 23:37:08 +0000 (16:37 -0700)
committerCasey Schaufler <casey@schaufler-ca.com>
Fri, 11 Apr 2014 21:35:28 +0000 (14:35 -0700)
commitd8ec7608adbe3cf96ebc53b80d54e033f96980f7
treef015da7353f4824800a5fc6a89442f37628f62d1
parent70834bfc407a1a888342b9dddbc7fa6a9357d15c
Smack: bidirectional UDS connect check

Smack IPC policy requires that the sender have write access
to the receiver. UDS streams don't do per-packet checks. The
only check is done at connect time. The existing code checks
if the connecting process can write to the other, but not the
other way around. This change adds a check that the other end
can write to the connecting process.

Targeted for git://git.gitorious.org/smack-next/kernel.git

Signed-off-by: Casey Schuafler <casey@schaufler-ca.com>
security/smack/smack.h
security/smack/smack_lsm.c