Tetsuo Handa 59df3166ef TOMOYO: Fix interactive judgment functionality. ...

Commit 17fcfbd9 "TOMOYO: Add interactive enforcing mode." introduced ability
to query access decision using userspace programs. It was using global PID for
reaching policy configuration of the process. However, use of PID returns stale
policy configuration when the process's subjective credentials and objective
credentials differ. Fix this problem by allowing reaching policy configuration
via query id.

Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>

2011-10-29 08:34:41 +11:00

..

apparmor

apparmor: sparse fix: include procattr.h in procattr.c

2011-09-09 16:56:29 -07:00

integrity

evm: clean verification status

2011-09-14 15:24:52 -04:00

keys

encrypted-keys: check hex2bin result

2011-09-20 23:26:44 -04:00

selinux

selinux: sparse fix: fix several warnings in the security server code

2011-09-09 16:56:32 -07:00

smack

Smack: allow to access /smack/access as normal user

2011-10-20 16:07:31 -07:00

tomoyo

TOMOYO: Fix interactive judgment functionality.

2011-10-29 08:34:41 +11:00

capability.c

->permission() sanitizing: don't pass flags to ->inode_permission()

2011-07-20 01:43:26 -04:00

commoncap.c

capabilities: initialize has_cap

2011-08-16 09:20:45 +10:00

device_cgroup.c

security,rcu: Convert call_rcu(whitelist_item_free) to kfree_rcu()

2011-07-20 11:05:30 -07:00

inode.c

convert get_sb_single() users

2010-10-29 04:16:28 -04:00

Kconfig

encrypted-keys: remove trusted-keys dependency

2011-09-14 15:23:49 -04:00

lsm_audit.c

LSM: separate LSM_AUDIT_DATA_DENTRY from LSM_AUDIT_DATA_PATH

2011-04-25 18:14:07 -04:00

Makefile

integrity: move ima inode integrity data management

2011-07-18 12:29:38 -04:00

min_addr.c

mmap_min_addr check CAP_SYS_RAWIO only for write

2010-04-23 08:56:31 +10:00

security.c

evm: fix security/security_old_init_security return code

2011-09-14 15:24:50 -04:00