linux-toradex.git/security/tomoyo/memory.c, branch v3.0.98

tomoyo: fix memory leak in tomoyo_commit_ok()

2011-03-30T23:25:06+00:00

When memory used for policy exceeds the quota, tomoyo_memory_ok() return false.
In this case, tomoyo_commit_ok() must call kfree() before returning NULL.
This bug exists since 2.6.35.

Signed-off-by: Xiaochen Wang 
Acked-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Rename symbols.

2010-08-02T05:34:54+00:00

Use shorter name in order to make it easier to fit 80 columns limit.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Copy directly to userspace buffer.

2010-08-02T05:34:45+00:00

When userspace program reads policy from /sys/kernel/security/tomoyo/
interface, TOMOYO uses line buffered mode. A line has at least one word.

Commit 006dacc "TOMOYO: Support longer pathname." changed a word's max length
from 4000 bytes to max kmalloc()able bytes. By that commit, a line's max length
changed from 8192 bytes to more than max kmalloc()able bytes.

Max number of words in a line remains finite. This patch changes the way of
buffering so that all words in a line are firstly directly copied to userspace
buffer as much as possible and are secondly queued for next read request.
Words queued are guaranteed to be valid until /sys/kernel/security/tomoyo/
interface is close()d.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Use common code for domain transition control.

2010-08-02T05:34:43+00:00

Use common code for "initialize_domain"/"no_initialize_domain"/"keep_domain"/
"no_keep_domain" keywords.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Merge path_group and number_group.

2010-08-02T05:34:42+00:00

Use common code for "path_group" and "number_group".

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Use array of "struct list_head".

2010-08-02T05:34:40+00:00

Assign list id and make the lists as array of "struct list_head".

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Make read function to void.

2010-08-02T05:34:35+00:00

Read functions do not fail. Make them from int to void.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Support longer pathname.

2010-08-02T05:33:41+00:00

Allow pathnames longer than 4000 bytes.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Split files into some pieces.

2010-08-02T05:33:39+00:00

security/tomoyo/common.c became too large to read.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris