linux-toradex.git/security/tomoyo/group.c, branch v4.5

TOMOYO: Add socket operation restriction support.

2011-09-13T22:27:05+00:00

This patch adds support for permission checks for PF_INET/PF_INET6/PF_UNIX
socket's bind()/listen()/connect()/send() operations.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Update kernel-doc.

2011-07-14T07:50:03+00:00

Update comments for scripts/kernel-doc and fix some of errors reported by
scripts/checkpatch.pl .

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Use struct for passing ACL line.

2011-06-28T23:31:20+00:00

Use structure for passing ACL line, in preparation for supporting policy
namespace and conditional parameters.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Use pathname specified by policy rather than execve()

2010-08-02T05:38:38+00:00

Commit c9e69318 "TOMOYO: Allow wildcard for execute permission." changed execute
permission and domainname to accept wildcards. But tomoyo_find_next_domain()
was using pathname passed to execve() rather than pathname specified by the
execute permission. As a result, processes were not able to transit to domains
which contain wildcards in their domainnames.

This patch passes pathname specified by the execute permission back to
tomoyo_find_next_domain() so that processes can transit to domains which
contain wildcards in their domainnames.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Merge path_group and number_group.

2010-08-02T05:34:42+00:00

Use common code for "path_group" and "number_group".

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris