Smack: bidirectional UDS connect check 95/55795/2
authorCasey Schaufler <casey@schaufler-ca.com>
Thu, 10 Apr 2014 23:37:08 +0000 (16:37 -0700)
committerSeung-Woo Kim <sw0312.kim@samsung.com>
Wed, 30 Dec 2015 00:58:35 +0000 (09:58 +0900)
commit37694c7cf2b9503349446f5f14519a590a1cd476
tree13121a36ebb40756797f69bb7eb2073baf21f7b3
parent826db2d77c3fe927c9218cbddddfbf1ead8d2486
Smack: bidirectional UDS connect check

Smack IPC policy requires that the sender have write access
to the receiver. UDS streams don't do per-packet checks. The
only check is done at connect time. The existing code checks
if the connecting process can write to the other, but not the
other way around. This change adds a check that the other end
can write to the connecting process.

Targeted for git://git.gitorious.org/smack-next/kernel.git

Change-Id: Ibecf37e5644f66885acc02ae0ee96f8009a0b5fa
Signed-off-by: Casey Schuafler <casey@schaufler-ca.com>
[Backport from mainline to 3.10]
Signed-off-by: Seung-Woo Kim <sw0312.kim@samsung.com>
security/smack/smack.h
security/smack/smack_lsm.c