linux

History

Tetsuo Handa 731d37aa70 TOMOYO: Allow domain transition without execve().

To be able to split permissions for Apache's CGI programs which are executed
without execve(), add special domain transition which is performed by writing
a TOMOYO's domainname to /sys/kernel/security/tomoyo/self_domain interface.

This is an API for TOMOYO-aware userland applications. However, since I expect
TOMOYO and other LSM modules to run in parallel, this patch does not use
/proc/self/attr/ interface in order to avoid conflicts with other LSM modules
when it became possible to run multiple LSM modules in parallel.

Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>

2011-09-14 08:27:06 +10:00

apparmor

apparmor: sparse fix: include procattr.h in procattr.c

2011-09-09 16:56:29 -07:00

integrity

ima: sparse fix: include linux/ima.h in ima_main.c

2011-09-09 16:56:30 -07:00

keys

KEYS: Correctly destroy key payloads when their keytype is removed

2011-08-23 09:57:37 +10:00

selinux

selinux: sparse fix: fix several warnings in the security server code