Smack: add support for modification of existing rules
authorRafal Krypa <r.krypa@samsung.com>
Thu, 10 Jan 2013 18:42:00 +0000 (19:42 +0100)
committerHeikki Krogerus <heikki.krogerus@linux.intel.com>
Mon, 11 Nov 2013 11:49:23 +0000 (13:49 +0200)
commitdf8354bdff705b30a32271ad1942048fa77a8ddf
tree8ff4714ced679008e9cf4cefcdece8dfe96657bd
parentd714f4b38e220ca2d6f3f47e5cca9d471f75ed55
Smack: add support for modification of existing rules

Rule modifications are enabled via /smack/change-rule. Format is as follows:
"Subject Object rwaxt rwaxt"

First two strings are subject and object labels up to 255 characters.
Third string contains permissions to enable.
Fourth string contains permissions to disable.

All unmentioned permissions will be left unchanged.
If no rule previously existed, it will be created.

Targeted for git://git.gitorious.org/smack-next/kernel.git

(Upstream commit id: e05b6f982a049113a88a1750e13fdb15298cbed4)

Signed-off-by: Rafal Krypa <r.krypa@samsung.com>
Signed-off-by: Heikki Krogerus <heikki.krogerus@linux.intel.com>
Documentation/security/Smack.txt
security/smack/smackfs.c