BACKPORT: Smack: Signal delivery as an append operation
authorCasey Schaufler <casey@schaufler-ca.com>
Tue, 30 Aug 2016 17:31:39 +0000 (10:31 -0700)
committerRafal Krypa <r.krypa@samsung.com>
Mon, 21 Nov 2016 14:37:06 +0000 (15:37 +0100)
commitc2a45560c773362ac6c348a2d224e6c1be6ab7f0
tree1fa9cb22043c187f3479b52f2523d06804d7b186
parenta801bd49a55b58698b93109231bb8dbe2e8104b8
BACKPORT: Smack: Signal delivery as an append operation

Under a strict subject/object security policy delivering a
signal or delivering network IPC could be considered either
a write or an append operation. The original choice to make
both write operations leads to an issue where IPC delivery
is desired under policy, but delivery of signals is not.
This patch provides the option of making signal delivery
an append operation, allowing Smack rules that deny signal
delivery while allowing IPC. This was requested for Tizen.

Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
(cherry-picked from upstream c60b906673eebb4f65840fa9dc204401caf276ea)
security/smack/Kconfig
security/smack/smack.h
security/smack/smack_lsm.c