projects / kernel / kernel-generic.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8214044) | patch
Smack: correct behavior in the mmap hook
authorCasey Schaufler <casey@schaufler-ca.com>
Wed, 9 Feb 2011 00:36:24 +0000 (16:36 -0800)
committerJames Morris <jmorris@namei.org>
Wed, 9 Feb 2011 07:50:23 +0000 (18:50 +1100)
commit0e0a070d3a47d279de66e08244769556deae2eee
tree8d9c07464833076a40c1d95dd2f8f33716509290tree | snapshot
parent821404434f3324bf23f545050ff64055a149766ecommit | diff
Smack: correct behavior in the mmap hook

The mmap policy enforcement was not properly handling the
  interaction between the global and local rule lists.
  Instead of going through one and then the other, which
  missed the important case where a rule specified that
  there should be no access, combine the access limitations
  where there is a rule in each list.

Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: James Morris <jmorris@namei.org>
security/smack/smack_lsm.c diff | blob | history
Domain: System / Uncategorized;