Casey Schaufler
c60b906673
Smack: Signal delivery as an append operation ...
Under a strict subject/object security policy delivering a
signal or delivering network IPC could be considered either
a write or an append operation. The original choice to make
both write operations leads to an issue where IPC delivery
is desired under policy, but delivery of signals is not.
This patch provides the option of making signal delivery
an append operation, allowing Smack rules that deny signal
delivery while allowing IPC. This was requested for Tizen.
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
2016-09-08 13:22:56 -07:00
apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handling
2016-07-27 17:39:26 +10:00
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2016-07-29 17:38:46 -07:00
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2016-07-29 17:38:46 -07:00
LSM: LoadPin: provide enablement CONFIG
2016-05-17 20:10:30 +10:00
Merge branch 'work.const-qstr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2016-08-06 09:49:02 -04:00
Smack: Signal delivery as an append operation
2016-09-08 13:22:56 -07:00
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2016-07-29 17:38:46 -07:00
Yama: fix double-spinlock and user access in atomic context
2016-05-26 09:56:18 +10:00
fs: Treat foreign mounts as nosuid
2016-06-24 10:40:41 -05:00
security/device_cgroup: Fix RCU_LOCKDEP_WARN() condition
2015-09-03 18:13:10 -07:00
securityfs: ->d_parent is never NULL or negative
2016-05-29 16:22:06 -04:00
LSM: LoadPin for kernel file loading restrictions
2016-04-21 10:47:27 +10:00
Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into next
2015-08-15 13:29:57 +10:00
LSM: LoadPin for kernel file loading restrictions
2016-04-21 10:47:27 +10:00
Merge branch 'work.const-qstr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2016-08-06 09:49:02 -04:00
c60b906673