linux-toradex.git/security/tomoyo/gc.c, branch v3.17

TOMOYO: Fix quota and garbage collector.

2011-10-12T01:15:20+00:00

Commit 059d84db "TOMOYO: Add socket operation restriction support" and
commit 731d37aa "TOMOYO: Allow domain transition without execve()." forgot to
update tomoyo_domain_quota_is_ok() and tomoyo_del_acl() which results in
incorrect quota counting and memory leak.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Remove tomoyo_policy_memory_lock spinlock.

2011-09-26T00:46:22+00:00

tomoyo_policy_lock mutex already protects it.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Simplify garbage collector.

2011-09-26T00:46:20+00:00

When TOMOYO started using garbage collector at commit 847b173e "TOMOYO: Add
garbage collector.", we waited for close() before kfree(). Thus, elements to be
kfree()d were queued up using tomoyo_gc_list list.

But it turned out that tomoyo_element_linked_by_gc() tends to choke garbage
collector when certain pattern of entries are queued.

Since garbage collector is no longer waiting for close() since commit 2e503bbb
"TOMOYO: Fix lockdep warning.", we can remove tomoyo_gc_list list and
tomoyo_element_linked_by_gc() by doing sequential processing.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Add socket operation restriction support.

2011-09-13T22:27:05+00:00

This patch adds support for permission checks for PF_INET/PF_INET6/PF_UNIX
socket's bind()/listen()/connect()/send() operations.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Add environment variable name restriction support.

2011-09-13T22:27:05+00:00

This patch adds support for checking environment variable's names.
Although TOMOYO already provides ability to check argv[]/envp[] passed to
execve() requests,

  file execute /bin/sh exec.envp["LD_LIBRARY_PATH"]="bar"

will reject execution of /bin/sh if environment variable LD_LIBRARY_PATH is not
defined. To grant execution of /bin/sh if LD_LIBRARY_PATH is not defined,
administrators have to specify like

  file execute /bin/sh exec.envp["LD_LIBRARY_PATH"]="/system/lib"
  file execute /bin/sh exec.envp["LD_LIBRARY_PATH"]=NULL

. Since there are many environment variables whereas conditional checks are
applied as "&&", it is difficult to cover all combinations. Therefore, this
patch supports conditional checks that are applied as "||", by specifying like

  file execute /bin/sh
  misc env LD_LIBRARY_PATH exec.envp["LD_LIBRARY_PATH"]="/system/lib"

which means "grant execution of /bin/sh if environment variable is not defined
or is defined and its value is /system/lib".

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

tomoyo: remove tomoyo_gc_thread()->daemonize()

2011-08-16T23:48:41+00:00

daemonize() is only needed when a user-space task does kernel_thread().

tomoyo_gc_thread() is kthread_create()'ed and thus it doesn't need
the soon-to-be-deprecated daemonize().

Signed-off-by: Oleg Nesterov 
Acked-by: Tejun Heo 
Acked-by: Matt Fleming 
Signed-off-by: James Morris

TOMOYO: Update kernel-doc.

2011-07-14T07:50:03+00:00

Update comments for scripts/kernel-doc and fix some of errors reported by
scripts/checkpatch.pl .

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Allow using argv[]/envp[] of execve() as conditions.

2011-07-11T01:05:33+00:00

This patch adds support for permission checks using argv[]/envp[] of execve()
request. Hooks are in the last patch of this pathset.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Allow using executable's realpath and symlink's target as conditions.

2011-07-11T01:05:33+00:00

This patch adds support for permission checks using executable file's realpath
upon execve() and symlink's target upon symlink(). Hooks are in the last patch
of this pathset.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Allow using UID/GID etc. of current thread as conditions.

2011-07-11T01:05:32+00:00

This patch adds support for permission checks using current thread's UID/GID
etc. in addition to pathnames.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris