OpenCloudOS-Kernel/security/smack
Andi Kleen 8c9e80ed27 SECURITY: Move exec_permission RCU checks into security modules
Right now all RCU walks fall back to reference walk when CONFIG_SECURITY
is enabled, even though just the standard capability module is active.
This is because security_inode_exec_permission unconditionally fails
RCU walks.

Move this decision to the low level security module. This requires
passing the RCU flags down the security hook. This way at least
the capability module and a few easy cases in selinux/smack work
with RCU walks with CONFIG_SECURITY=y

Signed-off-by: Andi Kleen <ak@linux.intel.com>
Acked-by: Eric Paris <eparis@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2011-04-22 16:17:29 -07:00
..
Kconfig Smack: Simplified Mandatory Access Control Kernel 2008-02-05 09:44:20 -08:00
Makefile Smack: Simplified Mandatory Access Control Kernel 2008-02-05 09:44:20 -08:00
smack.h security:smack: kill unused SMACK_LIST_MAX, MAY_ANY and MAY_ANYWRITE 2011-02-09 19:58:11 -08:00
smack_access.c Fix common misspellings 2011-03-31 11:26:23 -03:00
smack_lsm.c SECURITY: Move exec_permission RCU checks into security modules 2011-04-22 16:17:29 -07:00
smackfs.c Fix common misspellings 2011-03-31 11:26:23 -03:00