tree 0dd06c1ecc894444c42350c76c5712899d2ddb78
parent 272cd7a8c67dd40a31ecff76a503bbb84707f757
author Casey Schaufler <casey@schaufler-ca.com> 1316461302 -0700
committer Casey Schaufler <cschaufler@cschaufler-intel.(none)> 1318454668 -0700

Smack: Repair processing of fcntl

Al Viro pointed out that the processing of fcntl done
by Smack appeared poorly designed. He was right. There
are three things that required change. Most obviously,
the list of commands that really imply writing is limited
to those involving file locking and signal handling.
The initialization if the file security blob was
incomplete, requiring use of a heretofore unused LSM hook.
Finally, the audit information coming from a helper
masked the identity of the LSM hook. This patch corrects
all three of these defects.

This is targeted for the smack-next tree pending comments.

Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>