| commit | 676dac4b1bee0469d6932f698aeb77e8489f5861 | [log] [tgz] |
|---|---|---|
| author | Casey Schaufler <casey@schaufler-ca.com> | Thu Dec 02 06:43:39 2010 -0800 |
| committer | Casey Schaufler <casey@schaufler-ca.com> | Thu Dec 02 06:43:39 2010 -0800 |
| tree | 196b4cb35cf8dfdff0698dc4368cfd00acc7391a | |
| parent | 93ae86e759299718c611bc543b9b1633bf32905a [diff] |
This patch adds a new security attribute to Smack called SMACK64EXEC. It defines label that is used while task is running. Exception: in smack_task_wait() child task is checked for write access to parent task using label inherited from the task that forked it. Fixed issues from previous submit: - SMACK64EXEC was not read when SMACK64 was not set. - inode security blob was not updated after setting SMACK64EXEC - inode security blob was not updated when removing SMACK64EXEC