diff options
Diffstat (limited to 'Documentation/security/Smack.txt')
-rw-r--r-- | Documentation/security/Smack.txt | 10 |
1 files changed, 6 insertions, 4 deletions
diff --git a/Documentation/security/Smack.txt b/Documentation/security/Smack.txt index a416479b8a1c..8a177e4b6e21 100644 --- a/Documentation/security/Smack.txt +++ b/Documentation/security/Smack.txt | |||
@@ -28,12 +28,11 @@ Smack kernels use the CIPSO IP option. Some network | |||
28 | configurations are intolerant of IP options and can impede | 28 | configurations are intolerant of IP options and can impede |
29 | access to systems that use them as Smack does. | 29 | access to systems that use them as Smack does. |
30 | 30 | ||
31 | The current git repositories for Smack user space are: | 31 | The current git repository for Smack user space is: |
32 | 32 | ||
33 | git@gitorious.org:meego-platform-security/smackutil.git | 33 | git://github.com/smack-team/smack.git |
34 | git@gitorious.org:meego-platform-security/libsmack.git | ||
35 | 34 | ||
36 | These should make and install on most modern distributions. | 35 | This should make and install on most modern distributions. |
37 | There are three commands included in smackutil: | 36 | There are three commands included in smackutil: |
38 | 37 | ||
39 | smackload - properly formats data for writing to /smack/load | 38 | smackload - properly formats data for writing to /smack/load |
@@ -194,6 +193,9 @@ onlycap | |||
194 | these capabilities are effective at for processes with any | 193 | these capabilities are effective at for processes with any |
195 | label. The value is set by writing the desired label to the | 194 | label. The value is set by writing the desired label to the |
196 | file or cleared by writing "-" to the file. | 195 | file or cleared by writing "-" to the file. |
196 | revoke-subject | ||
197 | Writing a Smack label here sets the access to '-' for all access | ||
198 | rules with that subject label. | ||
197 | 199 | ||
198 | You can add access rules in /etc/smack/accesses. They take the form: | 200 | You can add access rules in /etc/smack/accesses. They take the form: |
199 | 201 | ||