linux-toradex.git/security/tomoyo/file.c, branch v3.0.5

TOMOYO: Don't add / for allow_unmount permission check.

2011-04-18T23:37:09+00:00

"mount --bind /path/to/file1 /path/to/file2" is legal. Therefore,
"umount /path/to/file2" is also legal. Do not automatically append trailing '/'
if pathname to be unmounted does not end with '/'.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Fix memory leak upon file open.

2011-03-02T23:13:26+00:00

In tomoyo_check_open_permission() since 2.6.36, TOMOYO was by error
recalculating already calculated pathname when checking allow_rewrite
permission. As a result, memory will leak whenever a file is opened for writing
without O_APPEND flag. Also, performance will degrade because TOMOYO is
calculating pathname regardless of profile configuration.
This patch fixes the leak and performance degrade.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Use pathname specified by policy rather than execve()

2010-08-02T05:38:38+00:00

Commit c9e69318 "TOMOYO: Allow wildcard for execute permission." changed execute
permission and domainname to accept wildcards. But tomoyo_find_next_domain()
was using pathname passed to execve() rather than pathname specified by the
execute permission. As a result, processes were not able to transit to domains
which contain wildcards in their domainnames.

This patch passes pathname specified by the execute permission back to
tomoyo_find_next_domain() so that processes can transit to domains which
contain wildcards in their domainnames.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Rename symbols.

2010-08-02T05:34:54+00:00

Use shorter name in order to make it easier to fit 80 columns limit.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Aggregate reader functions.

2010-08-02T05:34:41+00:00

Now lists are accessible via array index. Aggregate reader functions using index.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Use array of "struct list_head".

2010-08-02T05:34:40+00:00

Assign list id and make the lists as array of "struct list_head".

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Merge tomoyo_path_group and tomoyo_number_group

2010-08-02T05:34:40+00:00

"struct tomoyo_path_group" and "struct tomoyo_number_group" are identical.
Rename tomoyo_path_group/tomoyo_number_group to tomoyo_group and
tomoyo_path_group_member to tomoyo_path_group and
tomoyo_number_group_member to tomoyo_unmber_group.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Merge functions.

2010-08-02T05:34:35+00:00

Embed tomoyo_path_number_perm2() into tomoyo_path_number_perm().

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Remove wrapper function for reading keyword.

2010-08-02T05:34:34+00:00

Keyword strings are read-only. We can directly access them to reduce code size.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Rename symbols.

2010-08-02T05:34:33+00:00

Use shorter name in order to make it easier to fix 80 columns limit.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris