linux-toradex.git/security/smack, branch v3.0.79

Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into for-linus

2011-05-24T13:20:19+00:00

Conflicts:
	lib/flex_array.c
	security/selinux/avc.c
	security/selinux/hooks.c
	security/selinux/ss/policydb.c
	security/smack/smack_lsm.c

Manually resolve conflicts.

Signed-off-by: James Morris

SMACK: smack_file_lock can use the struct path

2011-04-25T22:14:45+00:00

smack_file_lock has a struct path, so use that instead of only the
dentry.

Signed-off-by: Eric Paris 
Acked-by: Casey Schaufler

LSM: separate LSM_AUDIT_DATA_DENTRY from LSM_AUDIT_DATA_PATH

2011-04-25T22:14:07+00:00

This patch separates and audit message that only contains a dentry from
one that contains a full path.  This allows us to make it harder to
misuse the interfaces or for the interfaces to be implemented wrong.

Signed-off-by: Eric Paris 
Acked-by: Casey Schaufler

LSM: split LSM_AUDIT_DATA_FS into _PATH and _INODE

2011-04-25T22:13:15+00:00

The lsm common audit code has wacky contortions making sure which pieces
of information are set based on if it was given a path, dentry, or
inode.  Split this into path and inode to get rid of some of the code
complexity.

Signed-off-by: Eric Paris 
Acked-by: Casey Schaufler

SECURITY: Move exec_permission RCU checks into security modules

2011-04-25T14:20:32+00:00

Right now all RCU walks fall back to reference walk when CONFIG_SECURITY
is enabled, even though just the standard capability module is active.
This is because security_inode_exec_permission unconditionally fails
RCU walks.

Move this decision to the low level security module. This requires
passing the RCU flags down the security hook. This way at least
the capability module and a few easy cases in selinux/smack work
with RCU walks with CONFIG_SECURITY=y

Signed-off-by: Andi Kleen 
Signed-off-by: Eric Paris

SECURITY: Move exec_permission RCU checks into security modules

2011-04-22T23:17:29+00:00

Right now all RCU walks fall back to reference walk when CONFIG_SECURITY
is enabled, even though just the standard capability module is active.
This is because security_inode_exec_permission unconditionally fails
RCU walks.

Move this decision to the low level security module. This requires
passing the RCU flags down the security hook. This way at least
the capability module and a few easy cases in selinux/smack work
with RCU walks with CONFIG_SECURITY=y

Signed-off-by: Andi Kleen 
Acked-by: Eric Paris 
Signed-off-by: Linus Torvalds

Fix common misspellings

2011-03-31T14:26:23+00:00

Fixes generated by 'codespell' and manually reviewed.

Signed-off-by: Lucas De Marchi

Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into next

2011-03-08T00:38:10+00:00

Smack: correct final mmap check comparison

2011-02-10T03:58:42+00:00

The mmap policy enforcement checks the access of the
SMACK64MMAP subject against the current subject incorrectly.
The check as written works correctly only if the access
rules involved have the same access. This is the common
case, so initial testing did not find a problem.

Signed-off-by: Casey Schaufler

security:smack: kill unused SMACK_LIST_MAX, MAY_ANY and MAY_ANYWRITE

2011-02-10T03:58:11+00:00

Kill unused macros of SMACK_LIST_MAX, MAY_ANY and MAY_ANYWRITE.
v2: As Casey Schaufler's advice, also remove MAY_ANY.

Signed-off-by: Shan Wei 
Signed-off-by: Casey Schaufler