linux-toradex.git/security/tomoyo/condition.c, branch v3.1 Linux kernel for Apalis and Colibri modules TOMOYO: Allow using argv[]/envp[] of execve() as conditions. 2011-07-11T01:05:33+00:00 Tetsuo Handa penguin-kernel@I-love.SAKURA.ne.jp 2011-07-08T04:24:54+00:00 5b636857fee642694e287e3a181b523b16098c93 This patch adds support for permission checks using argv[]/envp[] of execve() request. Hooks are in the last patch of this pathset. Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Signed-off-by: James Morris <jmorris@namei.org> 
This patch adds support for permission checks using argv[]/envp[] of execve()
request. Hooks are in the last patch of this pathset.

Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>
TOMOYO: Allow using executable's realpath and symlink's target as conditions. 2011-07-11T01:05:33+00:00 Tetsuo Handa penguin-kernel@I-love.SAKURA.ne.jp 2011-07-08T04:23:44+00:00 2ca9bf453bdd478bcb6c01aa2d0bd4c2f4350563 This patch adds support for permission checks using executable file's realpath upon execve() and symlink's target upon symlink(). Hooks are in the last patch of this pathset. Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Signed-off-by: James Morris <jmorris@namei.org> 
This patch adds support for permission checks using executable file's realpath
upon execve() and symlink's target upon symlink(). Hooks are in the last patch
of this pathset.

Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>
TOMOYO: Allow using owner/group etc. of file objects as conditions. 2011-07-11T01:05:32+00:00 Tetsuo Handa penguin-kernel@I-love.SAKURA.ne.jp 2011-07-08T04:22:41+00:00 8761afd49ebff8ae04c1a7888af090177441d07d This patch adds support for permission checks using file object's DAC attributes (e.g. owner/group) when checking file's pathnames. Hooks for passing file object's pointers are in the last patch of this pathset. Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Signed-off-by: James Morris <jmorris@namei.org> 
This patch adds support for permission checks using file object's DAC
attributes (e.g. owner/group) when checking file's pathnames. Hooks for passing
file object's pointers are in the last patch of this pathset.

Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>
TOMOYO: Allow using UID/GID etc. of current thread as conditions. 2011-07-11T01:05:32+00:00 Tetsuo Handa penguin-kernel@I-love.SAKURA.ne.jp 2011-07-08T04:21:37+00:00 2066a36125fcbf5220990173b9d8e8bc49ad7538 This patch adds support for permission checks using current thread's UID/GID etc. in addition to pathnames. Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Signed-off-by: James Morris <jmorris@namei.org> 
This patch adds support for permission checks using current thread's UID/GID
etc. in addition to pathnames.

Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>