linux-toradex.git/security/tomoyo/memory.c, branch v3.1

TOMOYO: Update kernel-doc.

2011-07-14T07:50:03+00:00

Update comments for scripts/kernel-doc and fix some of errors reported by
scripts/checkpatch.pl .

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Add built-in policy support.

2011-06-28T23:31:22+00:00

To be able to start using enforcing mode from the early stage of boot sequence,
this patch adds support for built-in policy configuration (and next patch adds
support for activating access control without calling external policy loader
program).

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Rename meminfo to stat and show more statistics.

2011-06-28T23:31:22+00:00

Show statistics such as last policy update time and last policy violation time
in addition to memory usage.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Add policy namespace support.

2011-06-28T23:31:21+00:00

Mauras Olivier reported that it is difficult to use TOMOYO in LXC environments,
for TOMOYO cannot distinguish between environments outside the container and
environments inside the container since LXC environments are created using
pivot_root(). To address this problem, this patch introduces policy namespace.

Each policy namespace has its own set of domain policy, exception policy and
profiles, which are all independent of other namespaces. This independency
allows users to develop policy without worrying interference among namespaces.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Add ACL group support.

2011-06-28T23:31:20+00:00

ACL group allows administrator to globally grant not only "file read"
permission but also other permissions.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Add auditing interface.

2011-06-28T23:31:20+00:00

Add /sys/kernel/security/tomoyo/audit interface. This interface generates audit
logs in the form of domain policy so that /usr/sbin/tomoyo-auditd can reuse
audit logs for appending to /sys/kernel/security/tomoyo/domain_policy
interface.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Use struct for passing ACL line.

2011-06-28T23:31:20+00:00

Use structure for passing ACL line, in preparation for supporting policy
namespace and conditional parameters.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Cleanup part 3.

2011-06-28T23:31:19+00:00

Use common structure for ACL with "struct list_head" + "atomic_t".
Use array/struct where possible.
Remove is_group from "struct tomoyo_name_union"/"struct tomoyo_number_union".
Pass "struct file"->private_data rather than "struct file".
Update some of comments.
Bring tomoyo_same_acl_head() from common.h to domain.c .
Bring tomoyo_invalid()/tomoyo_valid() from common.h to util.c .

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

tomoyo: fix memory leak in tomoyo_commit_ok()

2011-03-30T23:25:06+00:00

When memory used for policy exceeds the quota, tomoyo_memory_ok() return false.
In this case, tomoyo_commit_ok() must call kfree() before returning NULL.
This bug exists since 2.6.35.

Signed-off-by: Xiaochen Wang 
Acked-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Rename symbols.

2010-08-02T05:34:54+00:00

Use shorter name in order to make it easier to fit 80 columns limit.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris