linux-toradex.git/security/tomoyo/mount.c, branch v4.9.60

tomoyo: constify assorted struct path *

2016-03-28T04:47:23+00:00

Signed-off-by: Al Viro

consitify do_mount() arguments

2012-10-12T00:02:04+00:00

Signed-off-by: Al Viro

TOMOYO: Fix mount flags checking order.

2012-02-29T23:23:19+00:00

Userspace can pass in arbitrary combinations of MS_* flags to mount().

If both MS_BIND and one of MS_SHARED/MS_PRIVATE/MS_SLAVE/MS_UNBINDABLE are
passed, device name which should be checked for MS_BIND was not checked because
MS_SHARED/MS_PRIVATE/MS_SLAVE/MS_UNBINDABLE had higher priority than MS_BIND.

If both one of MS_BIND/MS_MOVE and MS_REMOUNT are passed, device name which
should not be checked for MS_REMOUNT was checked because MS_BIND/MS_MOVE had
higher priority than MS_REMOUNT.

Fix these bugs by changing priority to MS_REMOUNT -> MS_BIND ->
MS_SHARED/MS_PRIVATE/MS_SLAVE/MS_UNBINDABLE -> MS_MOVE as with do_mount() does.

Also, unconditionally return -EINVAL if more than one of
MS_SHARED/MS_PRIVATE/MS_SLAVE/MS_UNBINDABLE is passed so that TOMOYO will not
generate inaccurate audit logs, for commit 7a2e8a8f "VFS: Sanity check mount
flags passed to change_mnt_propagation()" clarified that these flags must be
exclusively passed.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Update kernel-doc.

2011-07-14T07:50:03+00:00

Update comments for scripts/kernel-doc and fix some of errors reported by
scripts/checkpatch.pl .

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Enable conditional ACL.

2011-07-11T01:05:34+00:00

Enable conditional ACL by passing object's pointers.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

Merge branch 'linus' into next

2011-06-30T08:43:56+00:00

TOMOYO: Add auditing interface.

2011-06-28T23:31:20+00:00

Add /sys/kernel/security/tomoyo/audit interface. This interface generates audit
logs in the form of domain policy so that /usr/sbin/tomoyo-auditd can reuse
audit logs for appending to /sys/kernel/security/tomoyo/domain_policy
interface.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Use struct for passing ACL line.

2011-06-28T23:31:20+00:00

Use structure for passing ACL line, in preparation for supporting policy
namespace and conditional parameters.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Cleanup part 3.

2011-06-28T23:31:19+00:00

Use common structure for ACL with "struct list_head" + "atomic_t".
Use array/struct where possible.
Remove is_group from "struct tomoyo_name_union"/"struct tomoyo_number_union".
Pass "struct file"->private_data rather than "struct file".
Update some of comments.
Bring tomoyo_same_acl_head() from common.h to domain.c .
Bring tomoyo_invalid()/tomoyo_valid() from common.h to util.c .

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Cleanup part 2.

2011-06-28T23:31:19+00:00

Update (or temporarily remove) comments.
Remove or replace some of #define lines.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris