linux-toradex.git/security/tomoyo/Makefile, branch v4.2.3

tomoyo: Do not generate empty policy files

2015-04-07T19:27:45+00:00

The Makefile automatically generates the tomoyo policy files, which are
not removed by make clean (because they could have been provided by the
user). Instead of generating the missing files, use /dev/null if a
given file is not provided. Store the default exception_policy in
exception_policy.conf.default.

Acked-by: Tetsuo Handa 
Signed-off-by: Michal Marek

tomoyo: Use if_changed when generating builtin-policy.h

2015-04-07T19:27:45+00:00

Combine the generation of builtin-policy.h into a single command and use
if_changed, so that the file is regenerated each time the command
changes. The next patch will make use of this.

Acked-by: Tetsuo Handa 
Signed-off-by: Michal Marek

tomoyo: Use bin2c to generate builtin-policy.h

2015-04-07T19:27:45+00:00

Simplify the Makefile by using a readily available tool instead of a
custom sed script. The downside is that builtin-policy.h becomes
unreadable for humans, but it is only a generated file.

Acked-by: Tetsuo Handa 
Signed-off-by: Michal Marek

TOMOYO: Bump version.

2011-09-14T22:14:21+00:00

Tell userland tools that this is TOMOYO 2.5.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Add socket operation restriction support.

2011-09-13T22:27:05+00:00

This patch adds support for permission checks for PF_INET/PF_INET6/PF_UNIX
socket's bind()/listen()/connect()/send() operations.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Add environment variable name restriction support.

2011-09-13T22:27:05+00:00

This patch adds support for checking environment variable's names.
Although TOMOYO already provides ability to check argv[]/envp[] passed to
execve() requests,

  file execute /bin/sh exec.envp["LD_LIBRARY_PATH"]="bar"

will reject execution of /bin/sh if environment variable LD_LIBRARY_PATH is not
defined. To grant execution of /bin/sh if LD_LIBRARY_PATH is not defined,
administrators have to specify like

  file execute /bin/sh exec.envp["LD_LIBRARY_PATH"]="/system/lib"
  file execute /bin/sh exec.envp["LD_LIBRARY_PATH"]=NULL

. Since there are many environment variables whereas conditional checks are
applied as "&&", it is difficult to cover all combinations. Therefore, this
patch supports conditional checks that are applied as "||", by specifying like

  file execute /bin/sh
  misc env LD_LIBRARY_PATH exec.envp["LD_LIBRARY_PATH"]="/system/lib"

which means "grant execution of /bin/sh if environment variable is not defined
or is defined and its value is /system/lib".

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Allow using UID/GID etc. of current thread as conditions.

2011-07-11T01:05:32+00:00

This patch adds support for permission checks using current thread's UID/GID
etc. in addition to pathnames.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Add built-in policy support.

2011-06-28T23:31:22+00:00

To be able to start using enforcing mode from the early stage of boot sequence,
this patch adds support for built-in policy configuration (and next patch adds
support for activating access control without calling external policy loader
program).

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Add auditing interface.

2011-06-28T23:31:20+00:00

Add /sys/kernel/security/tomoyo/audit interface. This interface generates audit
logs in the form of domain policy so that /usr/sbin/tomoyo-auditd can reuse
audit logs for appending to /sys/kernel/security/tomoyo/domain_policy
interface.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Merge path_group and number_group.

2010-08-02T05:34:42+00:00

Use common code for "path_group" and "number_group".

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris