linux-toradex.git/security/tomoyo, branch v3.7

consitify do_mount() arguments

2012-10-12T00:02:04+00:00

Signed-off-by: Al Viro

mm: use mm->exe_file instead of first VM_EXECUTABLE vma->vm_file

2012-10-09T07:22:18+00:00

Some security modules and oprofile still uses VM_EXECUTABLE for retrieving
a task's executable file.  After this patch they will use mm->exe_file
directly.  mm->exe_file is protected with mm->mmap_sem, so locking stays
the same.

Signed-off-by: Konstantin Khlebnikov 
Acked-by: Chris Metcalf 			[arch/tile]
Acked-by: Tetsuo Handa 	[tomoyo]
Cc: Alexander Viro 
Cc: Carsten Otte 
Cc: Cyrill Gorcunov 
Cc: Eric Paris 
Cc: H. Peter Anvin 
Cc: Hugh Dickins 
Cc: Ingo Molnar 
Acked-by: James Morris 
Cc: Jason Baron 
Cc: Kentaro Takeda 
Cc: Matt Helsley 
Cc: Nick Piggin 
Cc: Oleg Nesterov 
Cc: Peter Zijlstra 
Cc: Robert Richter 
Cc: Suresh Siddha 
Cc: Venkatesh Pallipadi 
Acked-by: Linus Torvalds 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

userns: Teach security_path_chown to take kuids and kgids

2012-09-21T10:13:25+00:00

Don't make the security modules deal with raw user space uid and
gids instead pass in a kuid_t and a kgid_t so that security modules
only have to deal with internal kernel uids and gids.

Cc: Al Viro 
Cc: James Morris 
Cc: John Johansen 
Cc: Kentaro Takeda 
Cc: Tetsuo Handa 
Acked-by: Serge Hallyn 
Signed-off-by: Eric W. Biederman

userns: Convert tomoyo to use kuid and kgid where appropriate

2012-09-21T10:13:22+00:00

Acked-by: Tetsuo Handa 
Acked-by: Serge Hallyn 
Signed-off-by: Eric W. Biederman

Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into next

2012-05-22T01:21:06+00:00

Per pull request, for 3.5.

TOMOYO: Accept manager programs which do not start with / .

2012-05-15T00:24:29+00:00

The pathname of /usr/sbin/tomoyo-editpolicy seen from Ubuntu 12.04 Live CD is
squashfs:/usr/sbin/tomoyo-editpolicy rather than /usr/sbin/tomoyo-editpolicy .
Therefore, we need to accept manager programs which do not start with / .

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

SELinux: rename dentry_open to file_open

2012-04-09T16:22:50+00:00

dentry_open takes a file, rename it to file_open

Signed-off-by: Eric Paris

usermodehelper: use UMH_WAIT_PROC consistently

2012-03-23T23:58:41+00:00

A few call_usermodehelper() callers use the hardcoded constant instead of
the proper UMH_WAIT_PROC, fix them.

Reported-by: Tetsuo Handa 
Signed-off-by: Oleg Nesterov 
Cc: Lars Ellenberg 
Cc: Greg Kroah-Hartman 
Cc: Michal Januszewski 
Cc: Florian Tobias Schandinat 
Cc: Kentaro Takeda 
Cc: Tetsuo Handa 
Cc: James Morris 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2012-03-21T20:25:04+00:00

Pull security subsystem updates for 3.4 from James Morris:
 "The main addition here is the new Yama security module from Kees Cook,
  which was discussed at the Linux Security Summit last year.  Its
  purpose is to collect miscellaneous DAC security enhancements in one
  place.  This also marks a departure in policy for LSM modules, which
  were previously limited to being standalone access control systems.
  Chromium OS is using Yama, and I believe there are plans for Ubuntu,
  at least.

  This patchset also includes maintenance updates for AppArmor, TOMOYO
  and others."

Fix trivial conflict in  due to the jumo_label->static_key
rename.

* 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security: (38 commits)
  AppArmor: Fix location of const qualifier on generated string tables
  TOMOYO: Return error if fails to delete a domain
  AppArmor: add const qualifiers to string arrays
  AppArmor: Add ability to load extended policy
  TOMOYO: Return appropriate value to poll().
  AppArmor: Move path failure information into aa_get_name and rename
  AppArmor: Update dfa matching routines.
  AppArmor: Minor cleanup of d_namespace_path to consolidate error handling
  AppArmor: Retrieve the dentry_path for error reporting when path lookup fails
  AppArmor: Add const qualifiers to generated string tables
  AppArmor: Fix oops in policy unpack auditing
  AppArmor: Fix error returned when a path lookup is disconnected
  KEYS: testing wrong bit for KEY_FLAG_REVOKED
  TOMOYO: Fix mount flags checking order.
  security: fix ima kconfig warning
  AppArmor: Fix the error case for chroot relative path name lookup
  AppArmor: fix mapping of META_READ to audit and quiet flags
  AppArmor: Fix underflow in xindex calculation
  AppArmor: Fix dropping of allowed operations that are force audited
  AppArmor: Add mising end of structure test to caps unpacking
  ...

tomoyo: remove the second argument of k[un]map_atomic()

2012-03-20T13:48:28+00:00

Acked-by: Tetsuo Handa 
Signed-off-by: Cong Wang