SECURITY: Move exec_permission RCU checks into security modules
authorAndi Kleen <ak@linux.intel.com>
Fri, 22 Apr 2011 00:23:19 +0000 (17:23 -0700)
committerLinus Torvalds <torvalds@linux-foundation.org>
Fri, 22 Apr 2011 23:17:29 +0000 (16:17 -0700)
commit8c9e80ed276fc4b9c9fadf29d8bf6b3576112f1a
tree7595dd217545593675d40f85cfb11d69697a8300
parent8d082f8f3fb89e8a1fcb5120ad98cd9860c8a3e8
SECURITY: Move exec_permission RCU checks into security modules

Right now all RCU walks fall back to reference walk when CONFIG_SECURITY
is enabled, even though just the standard capability module is active.
This is because security_inode_exec_permission unconditionally fails
RCU walks.

Move this decision to the low level security module. This requires
passing the RCU flags down the security hook. This way at least
the capability module and a few easy cases in selinux/smack work
with RCU walks with CONFIG_SECURITY=y

Signed-off-by: Andi Kleen <ak@linux.intel.com>
Acked-by: Eric Paris <eparis@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
include/linux/security.h
security/capability.c
security/security.c
security/selinux/hooks.c
security/smack/smack_lsm.c