linux-toradex.git/security/tomoyo, branch v3.1

TOMOYO: Fix incomplete read of /sys/kernel/security/tomoyo/profile

2011-08-08T03:13:45+00:00

Commit bd03a3e4 "TOMOYO: Add policy namespace support." forgot to set EOF flag
and forgot to print namespace at PREFERENCE line.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Update kernel-doc.

2011-07-14T07:50:03+00:00

Update comments for scripts/kernel-doc and fix some of errors reported by
scripts/checkpatch.pl .

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Enable conditional ACL.

2011-07-11T01:05:34+00:00

Enable conditional ACL by passing object's pointers.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Allow using argv[]/envp[] of execve() as conditions.

2011-07-11T01:05:33+00:00

This patch adds support for permission checks using argv[]/envp[] of execve()
request. Hooks are in the last patch of this pathset.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Allow using executable's realpath and symlink's target as conditions.

2011-07-11T01:05:33+00:00

This patch adds support for permission checks using executable file's realpath
upon execve() and symlink's target upon symlink(). Hooks are in the last patch
of this pathset.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Allow using owner/group etc. of file objects as conditions.

2011-07-11T01:05:32+00:00

This patch adds support for permission checks using file object's DAC
attributes (e.g. owner/group) when checking file's pathnames. Hooks for passing
file object's pointers are in the last patch of this pathset.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Allow using UID/GID etc. of current thread as conditions.

2011-07-11T01:05:32+00:00

This patch adds support for permission checks using current thread's UID/GID
etc. in addition to pathnames.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Remove /sys/kernel/security/tomoyo/.domain_status interface.

2011-07-07T23:25:36+00:00

/sys/kernel/security/tomoyo/.domain_status can be easily emulated using
/sys/kernel/security/tomoyo/domain_policy . We can remove this interface by
updating /usr/sbin/tomoyo-setprofile utility.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Fix wrong domainname in tomoyo_init_log().

2011-06-30T23:25:47+00:00

Commit eadd99cc "TOMOYO: Add auditing interface." by error replaced
"struct tomoyo_request_info"->domain with tomoyo_domain().

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Cleanup header file.

2011-06-30T08:49:25+00:00

Sort by alphabetic order.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris