Smack: Signal delivery as an append operation
authorCasey Schaufler <casey@schaufler-ca.com>
Tue, 30 Aug 2016 17:31:39 +0000 (10:31 -0700)
committerJaechul Lee <jcsing.lee@samsung.com>
Tue, 14 Feb 2017 04:26:26 +0000 (13:26 +0900)
commit654d6a7407ac79f7135ce2733bfe5fb41c7a9928
treefcec2477b0138149a95ca65b2f765377b2e6c4dd
parent6b434b6ccbf3bce9f391f704c72d4dc909d00a3d
Smack: Signal delivery as an append operation

Under a strict subject/object security policy delivering a
signal or delivering network IPC could be considered either
a write or an append operation. The original choice to make
both write operations leads to an issue where IPC delivery
is desired under policy, but delivery of signals is not.
This patch provides the option of making signal delivery
an append operation, allowing Smack rules that deny signal
delivery while allowing IPC. This was requested for Tizen.

Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
security/smack/Kconfig
security/smack/smack.h
security/smack/smack_lsm.c