mirror of
https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git
synced 2026-10-28 10:41:38 -04:00
introduce new LSM hooks where vfsmount is available.
Add new LSM hooks for path-based checks. Call them on directory-modifying operations at the points where we still know the vfsmount involved. Signed-off-by: Kentaro Takeda <[email protected]> Signed-off-by: Tetsuo Handa <[email protected]> Signed-off-by: Toshiharu Harada <[email protected]> Signed-off-by: Al Viro <[email protected]>
This commit is contained in:
parent
6a94cb7306
commit
be6d3e56a6
7 changed files with 314 additions and 0 deletions
|
|
@ -81,6 +81,15 @@ config SECURITY_NETWORK_XFRM
|
|||
IPSec.
|
||||
If you are unsure how to answer this question, answer N.
|
||||
|
||||
config SECURITY_PATH
|
||||
bool "Security hooks for pathname based access control"
|
||||
depends on SECURITY
|
||||
help
|
||||
This enables the security hooks for pathname based access control.
|
||||
If enabled, a security module can use these hooks to
|
||||
implement pathname based access controls.
|
||||
If you are unsure how to answer this question, answer N.
|
||||
|
||||
config SECURITY_FILE_CAPABILITIES
|
||||
bool "File POSIX Capabilities"
|
||||
default n
|
||||
|
|
|
|||
Loading…
Reference in a new issue