commit | a6834c0b9114c06106efee8e9f2a11fbbb104567 | [log] [tgz] |
---|---|---|
author | Casey Schaufler <casey@schaufler-ca.com> | Mon Apr 21 11:10:26 2014 -0700 |
committer | Casey Schaufler <casey@schaufler-ca.com> | Wed Apr 23 08:52:39 2014 -0700 |
tree | 61086ddbe2c1e5fbb7d9d487f801f6c0623901b7 | |
parent | 54e70ec5eb090193b03e69d551fa6771a5a217c4 [diff] |
Smack: Verify read access on file open - v3 Smack believes that many of the operatons that can be performed on an open file descriptor are read operations. The fstat and lseek system calls are examples. An implication of this is that files shouldn't be open if the task doesn't have read access even if it has write access and the file is being opened write only. Targeted for git://git.gitorious.org/smack-next/kernel.git Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>