litmus-rt.git/security/tomoyo, branch linux-tip

fs: take dcache_lock inside __d_path

2010-10-26T01:26:12+00:00

All callers take dcache_lock just around the call to __d_path, so
take the lock into it in preparation of getting rid of dcache_lock.

Signed-off-by: Christoph Hellwig 
Signed-off-by: Al Viro

TOMOYO: Print URL information before panic().

2010-10-20T23:12:45+00:00

Configuration files for TOMOYO 2.3 are not compatible with TOMOYO 2.2.
But current panic() message is too unfriendly and is confusing users.

Signed-off-by: Tetsuo Handa 
Reviewed-by: KOSAKI Motohiro 
Signed-off-by: James Morris

tomoyo: cleanup. don't store bogus pointer

2010-10-20T23:12:32+00:00

If domain is NULL then &domain->list is a bogus address.  Let's leave
head->r.domain NULL instead of saving an unusable pointer.

This is just a cleanup.  The current code always checks head->r.eof
before dereferencing head->r.domain.

Signed-off-by: Dan Carpenter 
Acked-by: Tetsuo Handa

TOMOYO: Don't abuse sys_getpid(), sys_getppid()

2010-09-27T00:53:18+00:00

System call entry functions sys_*() are never to be called from
general kernel code.  The fact that they aren't declared in header
files should have been a clue.  These functions also don't exist on
Alpha since it has sys_getxpid() instead.

Signed-off-by: Ben Hutchings 
Acked-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Use pathname specified by policy rather than execve()

2010-08-02T05:38:38+00:00

Commit c9e69318 "TOMOYO: Allow wildcard for execute permission." changed execute
permission and domainname to accept wildcards. But tomoyo_find_next_domain()
was using pathname passed to execve() rather than pathname specified by the
execute permission. As a result, processes were not able to transit to domains
which contain wildcards in their domainnames.

This patch passes pathname specified by the execute permission back to
tomoyo_find_next_domain() so that processes can transit to domains which
contain wildcards in their domainnames.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Update version to 2.3.0

2010-08-02T05:35:10+00:00

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Fix quota check.

2010-08-02T05:35:09+00:00

Commit d74725b9 "TOMOYO: Use callback for updating entries." broke
tomoyo_domain_quota_is_ok() by counting deleted entries. It needs to
count non-deleted entries.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Explicitly set file_operations->llseek pointer.

2010-08-02T05:34:57+00:00

TOMOYO does not deal offset pointer. Thus seek operation makes
no sense. Changing default seek operation from default_llseek()
to no_llseek() might break some applications. Thus, explicitly
set noop_llseek().

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Add missing poll() hook.

2010-08-02T05:34:55+00:00

Commit 1dae08c "TOMOYO: Add interactive enforcing mode." forgot to register
poll() hook. As a result, /usr/sbin/tomoyo-queryd was doing busy loop.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris

TOMOYO: Rename symbols.

2010-08-02T05:34:54+00:00

Use shorter name in order to make it easier to fit 80 columns limit.

Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris