linux-toradex.git/security/tomoyo/Makefile, branch v3.4.95

TOMOYO: Bump version.

2011-09-14T22:14:21+00:00

Tell userland tools that this is TOMOYO 2.5.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Add socket operation restriction support.

2011-09-13T22:27:05+00:00

This patch adds support for permission checks for PF_INET/PF_INET6/PF_UNIX
socket's bind()/listen()/connect()/send() operations.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Add environment variable name restriction support.

2011-09-13T22:27:05+00:00

This patch adds support for checking environment variable's names.
Although TOMOYO already provides ability to check argv[]/envp[] passed to
execve() requests,

  file execute /bin/sh exec.envp["LD_LIBRARY_PATH"]="bar"

will reject execution of /bin/sh if environment variable LD_LIBRARY_PATH is not
defined. To grant execution of /bin/sh if LD_LIBRARY_PATH is not defined,
administrators have to specify like

  file execute /bin/sh exec.envp["LD_LIBRARY_PATH"]="/system/lib"
  file execute /bin/sh exec.envp["LD_LIBRARY_PATH"]=NULL

. Since there are many environment variables whereas conditional checks are
applied as "&&", it is difficult to cover all combinations. Therefore, this
patch supports conditional checks that are applied as "||", by specifying like

  file execute /bin/sh
  misc env LD_LIBRARY_PATH exec.envp["LD_LIBRARY_PATH"]="/system/lib"

which means "grant execution of /bin/sh if environment variable is not defined
or is defined and its value is /system/lib".

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Allow using UID/GID etc. of current thread as conditions.

2011-07-11T01:05:32+00:00

This patch adds support for permission checks using current thread's UID/GID
etc. in addition to pathnames.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Add built-in policy support.

2011-06-28T23:31:22+00:00

To be able to start using enforcing mode from the early stage of boot sequence,
this patch adds support for built-in policy configuration (and next patch adds
support for activating access control without calling external policy loader
program).

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Add auditing interface.

2011-06-28T23:31:20+00:00

Add /sys/kernel/security/tomoyo/audit interface. This interface generates audit
logs in the form of domain policy so that /usr/sbin/tomoyo-auditd can reuse
audit logs for appending to /sys/kernel/security/tomoyo/domain_policy
interface.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Merge path_group and number_group.

2010-08-02T05:34:42+00:00

Use common code for "path_group" and "number_group".

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Split files into some pieces.

2010-08-02T05:33:39+00:00

security/tomoyo/common.c became too large to read.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Add mount restriction.

2010-08-02T05:33:37+00:00

mount(2) has three string and one numeric parameters.
Split mount restriction code from security/tomoyo/file.c .

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Add numeric values grouping support.

2010-08-02T05:33:35+00:00

This patch adds numeric values grouping support, which is useful for grouping
numeric values such as file's UID, DAC's mode, ioctl()'s cmd number.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris