lkml.org 
[lkml]   [2008]   [Jan]   [23]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    SubjectRe: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2]
    Date
    Stephen Smalley <sds@tycho.nsa.gov> wrote:

    > Make sure that you or Dan submits a policy patch to register these
    > classes and permissions in the policy when the kernel patch is queued
    > for merge.

    Do I just send the attached patch to <selinux@tycho.nsa.gov>? Or do I need to
    make a diff from a point in the tree nearer the root? Is there anything else
    I need to alter whilst I'm at it?

    David
    ---
    Index: policy/flask/security_classes
    ===================================================================
    --- policy/flask/security_classes (revision 2573)
    +++ policy/flask/security_classes (working copy)
    @@ -109,4 +109,7 @@
    # network peer labels
    class peer

    +# kernel services that need to override task security
    +class kernel_service
    +
    # FLASK
    Index: policy/flask/access_vectors
    ===================================================================
    --- policy/flask/access_vectors (revision 2573)
    +++ policy/flask/access_vectors (working copy)
    @@ -736,3 +736,10 @@
    {
    recv
    }
    +
    +# kernel services that need to override task security
    +class kernel_service
    +{
    + use_as_override
    + create_files_as
    +}

    \
     
     \ /
      Last update: 2008-01-23 21:55    [W:0.022 / U:2.172 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site