| commit | 242631c49d4cf39642741d6627750151b058233b | [log] [tgz] |
|---|---|---|
| author | Stephen Smalley <sds@tycho.nsa.gov> | Thu Jun 05 09:21:28 2008 -0400 |
| committer | James Morris <jmorris@namei.org> | Mon Jul 14 15:01:53 2008 +1000 |
| tree | 26756c2b256cf5b14ca279a634d5bcc5e67b2b41 | |
| parent | abc69bb633931bf54c6db798bcdc6fd1e0284742 [diff] |
selinux: simplify ioctl checking Simplify and improve the robustness of the SELinux ioctl checking by using the "access mode" bits of the ioctl command to determine the permission check rather than dealing with individual command values. This removes any knowledge of specific ioctl commands from SELinux and follows the same guidance we gave to Smack earlier. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> Signed-off-by: James Morris <jmorris@namei.org>