commit | 5e9ab593c2da3064136ffa1d7f712d0e957e1958 | [log] [tgz] |
---|---|---|
author | Pankaj Kumar <pankaj.k2@samsung.com> | Fri Dec 13 15:12:22 2013 +0530 |
committer | Casey Schaufler <casey@schaufler-ca.com> | Fri Apr 11 14:34:52 2014 -0700 |
tree | 118dec536c673d54ddeb44e7f917e53dd9590b9c | |
parent | 668678185247303450e60df14569f94cf5775fea [diff] |
bugfix patch for SMACK 1. In order to remove any SMACK extended attribute from a file, a user should have CAP_MAC_ADMIN capability. But user without having this capability is able to remove SMACK64MMAP security attribute. 2. While validating size and value of smack extended attribute in smack_inode_setsecurity hook, wrong error code is returned. Signed-off-by: Pankaj Kumar <pamkaj.k2@samsung.com> Signed-off-by: Himanshu Shukla <himanshu.sh@samsung.com>