linux-toradex.git/security/smack, branch colibri

doc: Update the email address for Paul Moore in various source files

2011-08-02T00:58:33+00:00

My @hp.com will no longer be valid starting August 5, 2011 so an update is
necessary.  My new email address is employer independent so we don't have
to worry about doing this again any time soon.

Signed-off-by: Paul Moore 
Signed-off-by: Paul Moore 
Signed-off-by: David S. Miller

->permission() sanitizing: don't pass flags to ->inode_permission()

2011-07-20T05:43:26+00:00

pass that via mask instead.

Signed-off-by: Al Viro

Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into for-linus

2011-05-24T13:20:19+00:00

Conflicts:
	lib/flex_array.c
	security/selinux/avc.c
	security/selinux/hooks.c
	security/selinux/ss/policydb.c
	security/smack/smack_lsm.c

Manually resolve conflicts.

Signed-off-by: James Morris

SMACK: smack_file_lock can use the struct path

2011-04-25T22:14:45+00:00

smack_file_lock has a struct path, so use that instead of only the
dentry.

Signed-off-by: Eric Paris 
Acked-by: Casey Schaufler

LSM: separate LSM_AUDIT_DATA_DENTRY from LSM_AUDIT_DATA_PATH

2011-04-25T22:14:07+00:00

This patch separates and audit message that only contains a dentry from
one that contains a full path.  This allows us to make it harder to
misuse the interfaces or for the interfaces to be implemented wrong.

Signed-off-by: Eric Paris 
Acked-by: Casey Schaufler

LSM: split LSM_AUDIT_DATA_FS into _PATH and _INODE

2011-04-25T22:13:15+00:00

The lsm common audit code has wacky contortions making sure which pieces
of information are set based on if it was given a path, dentry, or
inode.  Split this into path and inode to get rid of some of the code
complexity.

Signed-off-by: Eric Paris 
Acked-by: Casey Schaufler

SECURITY: Move exec_permission RCU checks into security modules

2011-04-25T14:20:32+00:00

Right now all RCU walks fall back to reference walk when CONFIG_SECURITY
is enabled, even though just the standard capability module is active.
This is because security_inode_exec_permission unconditionally fails
RCU walks.

Move this decision to the low level security module. This requires
passing the RCU flags down the security hook. This way at least
the capability module and a few easy cases in selinux/smack work
with RCU walks with CONFIG_SECURITY=y

Signed-off-by: Andi Kleen 
Signed-off-by: Eric Paris

SECURITY: Move exec_permission RCU checks into security modules

2011-04-22T23:17:29+00:00

Right now all RCU walks fall back to reference walk when CONFIG_SECURITY
is enabled, even though just the standard capability module is active.
This is because security_inode_exec_permission unconditionally fails
RCU walks.

Move this decision to the low level security module. This requires
passing the RCU flags down the security hook. This way at least
the capability module and a few easy cases in selinux/smack work
with RCU walks with CONFIG_SECURITY=y

Signed-off-by: Andi Kleen 
Acked-by: Eric Paris 
Signed-off-by: Linus Torvalds

Fix common misspellings

2011-03-31T14:26:23+00:00

Fixes generated by 'codespell' and manually reviewed.

Signed-off-by: Lucas De Marchi

Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into next

2011-03-08T00:38:10+00:00