Kernel threads excluded from smack checks
authorRoman Kubiak <r.kubiak@samsung.com>
Mon, 24 Aug 2015 07:34:11 +0000 (16:34 +0900)
committerSooyoung Ha <yoosah.ha@samsung.com>
Tue, 25 Aug 2015 06:27:49 +0000 (15:27 +0900)
commit4e5c8ad610a4bd4f8773b4d54369d62b7ac72e94
tree14aed6c457a196de640ab25c7ac84047d35d7bf2
parentd6996a1ffc38c4bb651608a716bea51e070e3f42
Kernel threads excluded from smack checks

Adds an ignore case for kernel tasks,
so that they can access all resources.

Since kernel worker threads are spawned with
floor label, they are severely restricted by
Smack policy. It is not an issue without onlycap,
as these processes also run with root,
so CAP_MAC_OVERRIDE kicks in. But with onlycap
turned on, there is no way to change the label
for these processes.

Change-Id: Ic0b9c0d9d5874f0299e0aba74d01c180e2722d48
Signed-off-by: Roman Kubiak <r.kubiak@samsung.com>
security/smack/smack_access.c