linux-toradex.git/security/tomoyo/util.c, branch v3.0.22

TOMOYO: Fix wrong domainname validation.

2011-05-12T01:07:21+00:00

In tomoyo_correct_domain() since 2.6.36, TOMOYO was by error validating
"" + "/foo/\" + "/bar" when " /foo/\* /bar" was given.
As a result, legal domainnames like " /foo/\* /bar" are rejected.

Reported-by: Hayama Yossihiro 
Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Fix quota check.

2010-08-02T05:35:09+00:00

Commit d74725b9 "TOMOYO: Use callback for updating entries." broke
tomoyo_domain_quota_is_ok() by counting deleted entries. It needs to
count non-deleted entries.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Rename symbols.

2010-08-02T05:34:54+00:00

Use shorter name in order to make it easier to fit 80 columns limit.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Use common code for domain transition control.

2010-08-02T05:34:43+00:00

Use common code for "initialize_domain"/"no_initialize_domain"/"keep_domain"/
"no_keep_domain" keywords.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Merge path_group and number_group.

2010-08-02T05:34:42+00:00

Use common code for "path_group" and "number_group".

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Rename symbols.

2010-08-02T05:34:33+00:00

Use shorter name in order to make it easier to fix 80 columns limit.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Use callback for updating entries.

2010-08-02T05:34:28+00:00

Use common "struct list_head" + "bool" + "u8" structure and
use common code for elements using that structure.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Update profile structure.

2010-08-02T05:33:43+00:00

This patch allows users to change access control mode for per-operation basis.
This feature comes from non LSM version of TOMOYO which is designed for
permitting users to use SELinux and TOMOYO at the same time.

SELinux does not care filename in a directory whereas TOMOYO does. Change of
filename can change how the file is used. For example, renaming index.txt to
.htaccess will change how the file is used. Thus, letting SELinux to enforce
read()/write()/mmap() etc. restriction and letting TOMOYO to enforce rename()
restriction is an example usage of this feature.

What is unfortunate for me is that currently LSM does not allow users to use
SELinux and LSM version of TOMOYO at the same time...

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Allow wildcard for execute permission.

2010-08-02T05:33:42+00:00

Some applications create and execute programs dynamically. We need to accept
wildcard for execute permission because such programs contain random suffix
in their filenames. This patch loosens up regulation of string parameters.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Split files into some pieces.

2010-08-02T05:33:39+00:00

security/tomoyo/common.c became too large to read.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris