linux-toradex.git/security/tomoyo, branch v3.10.52

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2013-05-02T00:51:54+00:00

Pull VFS updates from Al Viro,

Misc cleanups all over the place, mainly wrt /proc interfaces (switch
create_proc_entry to proc_create(), get rid of the deprecated
create_proc_read_entry() in favor of using proc_create_data() and
seq_file etc).

7kloc removed.

* 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs: (204 commits)
  don't bother with deferred freeing of fdtables
  proc: Move non-public stuff from linux/proc_fs.h to fs/proc/internal.h
  proc: Make the PROC_I() and PDE() macros internal to procfs
  proc: Supply a function to remove a proc entry by PDE
  take cgroup_open() and cpuset_open() to fs/proc/base.c
  ppc: Clean up scanlog
  ppc: Clean up rtas_flash driver somewhat
  hostap: proc: Use remove_proc_subtree()
  drm: proc: Use remove_proc_subtree()
  drm: proc: Use minor->index to label things, not PDE->name
  drm: Constify drm_proc_list[]
  zoran: Don't print proc_dir_entry data in debug
  reiserfs: Don't access the proc_dir_entry in r_open(), r_start() r_show()
  proc: Supply an accessor for getting the data from a PDE's parent
  airo: Use remove_proc_subtree()
  rtl8192u: Don't need to save device proc dir PDE
  rtl8187se: Use a dir under /proc/net/r8180/
  proc: Add proc_mkdir_data()
  proc: Move some bits from linux/proc_fs.h to linux/{of.h,signal.h,tty.h}
  proc: Move PDE_NET() to fs/proc/proc_net.c
  ...

tomoyo_close_control: don't bother with return value

2013-04-29T19:41:42+00:00

Signed-off-by: Al Viro

tomoyo: use DEFINE_SRCU() to define tomoyo_ss

2013-03-18T12:53:00+00:00

DEFINE_STATIC_SRCU() defines srcu struct and do init at build time.

Signed-off-by: Lai Jiangshan 
Acked-by: Tetsuo Handa 
Signed-off-by: James Morris

new helper: file_inode(file)

2013-02-23T04:31:31+00:00

Signed-off-by: Al Viro

consitify do_mount() arguments

2012-10-12T00:02:04+00:00

Signed-off-by: Al Viro

mm: use mm->exe_file instead of first VM_EXECUTABLE vma->vm_file

2012-10-09T07:22:18+00:00

Some security modules and oprofile still uses VM_EXECUTABLE for retrieving
a task's executable file.  After this patch they will use mm->exe_file
directly.  mm->exe_file is protected with mm->mmap_sem, so locking stays
the same.

Signed-off-by: Konstantin Khlebnikov 
Acked-by: Chris Metcalf 			[arch/tile]
Acked-by: Tetsuo Handa 	[tomoyo]
Cc: Alexander Viro 
Cc: Carsten Otte 
Cc: Cyrill Gorcunov 
Cc: Eric Paris 
Cc: H. Peter Anvin 
Cc: Hugh Dickins 
Cc: Ingo Molnar 
Acked-by: James Morris 
Cc: Jason Baron 
Cc: Kentaro Takeda 
Cc: Matt Helsley 
Cc: Nick Piggin 
Cc: Oleg Nesterov 
Cc: Peter Zijlstra 
Cc: Robert Richter 
Cc: Suresh Siddha 
Cc: Venkatesh Pallipadi 
Acked-by: Linus Torvalds 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

userns: Teach security_path_chown to take kuids and kgids

2012-09-21T10:13:25+00:00

Don't make the security modules deal with raw user space uid and
gids instead pass in a kuid_t and a kgid_t so that security modules
only have to deal with internal kernel uids and gids.

Cc: Al Viro 
Cc: James Morris 
Cc: John Johansen 
Cc: Kentaro Takeda 
Cc: Tetsuo Handa 
Acked-by: Serge Hallyn 
Signed-off-by: Eric W. Biederman

userns: Convert tomoyo to use kuid and kgid where appropriate

2012-09-21T10:13:22+00:00

Acked-by: Tetsuo Handa 
Acked-by: Serge Hallyn 
Signed-off-by: Eric W. Biederman

Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into next

2012-05-22T01:21:06+00:00

Per pull request, for 3.5.

TOMOYO: Accept manager programs which do not start with / .

2012-05-15T00:24:29+00:00

The pathname of /usr/sbin/tomoyo-editpolicy seen from Ubuntu 12.04 Live CD is
squashfs:/usr/sbin/tomoyo-editpolicy rather than /usr/sbin/tomoyo-editpolicy .
Therefore, we need to accept manager programs which do not start with / .

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris