diff options
author | Kees Cook <kees@outflux.net> | 2011-11-01 20:20:01 -0400 |
---|---|---|
committer | James Morris <jmorris@namei.org> | 2011-11-15 20:37:27 -0500 |
commit | e163bc8e4a0cd1cdffadb58253f7651201722d56 (patch) | |
tree | 66570af9c0304cf53350e8e67c67e407e92ee12f /Documentation/security/credentials.txt | |
parent | 1933ca8771585d43d3d2099c0c9ba7ca6b96e303 (diff) |
Documentation: clarify the purpose of LSMs
Clarify the purpose of the LSM interface with some brief examples and
pointers to additional documentation.
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: James Morris <jmorris@namei.org>
Diffstat (limited to 'Documentation/security/credentials.txt')
-rw-r--r-- | Documentation/security/credentials.txt | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/Documentation/security/credentials.txt b/Documentation/security/credentials.txt index fc0366cbd7ce..86257052e31a 100644 --- a/Documentation/security/credentials.txt +++ b/Documentation/security/credentials.txt | |||
@@ -221,10 +221,10 @@ The Linux kernel supports the following types of credentials: | |||
221 | (5) LSM | 221 | (5) LSM |
222 | 222 | ||
223 | The Linux Security Module allows extra controls to be placed over the | 223 | The Linux Security Module allows extra controls to be placed over the |
224 | operations that a task may do. Currently Linux supports two main | 224 | operations that a task may do. Currently Linux supports several LSM |
225 | alternate LSM options: SELinux and Smack. | 225 | options. |
226 | 226 | ||
227 | Both work by labelling the objects in a system and then applying sets of | 227 | Some work by labelling the objects in a system and then applying sets of |
228 | rules (policies) that say what operations a task with one label may do to | 228 | rules (policies) that say what operations a task with one label may do to |
229 | an object with another label. | 229 | an object with another label. |
230 | 230 | ||