Tetsuo Handa 731d37aa70 TOMOYO: Allow domain transition without execve(). ...

To be able to split permissions for Apache's CGI programs which are executed
without execve(), add special domain transition which is performed by writing
a TOMOYO's domainname to /sys/kernel/security/tomoyo/self_domain interface.

This is an API for TOMOYO-aware userland applications. However, since I expect
TOMOYO and other LSM modules to run in parallel, this patch does not use
/proc/self/attr/ interface in order to avoid conflicts with other LSM modules
when it became possible to run multiple LSM modules in parallel.

Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>

2011-09-14 08:27:06 +10:00

..

audit.c

TOMOYO: Allow controlling generation of access granted logs for per an entry basis.

2011-09-14 08:27:06 +10:00

common.c

TOMOYO: Allow domain transition without execve().

2011-09-14 08:27:06 +10:00

common.h

TOMOYO: Allow domain transition without execve().

2011-09-14 08:27:06 +10:00

condition.c

TOMOYO: Allow controlling generation of access granted logs for per an entry basis.

2011-09-14 08:27:06 +10:00

domain.c

TOMOYO: Allow controlling generation of access granted logs for per an entry basis.

2011-09-14 08:27:06 +10:00

environ.c

TOMOYO: Add environment variable name restriction support.

2011-09-14 08:27:05 +10:00

file.c

TOMOYO: Update kernel-doc.

2011-07-14 17:50:03 +10:00

gc.c

TOMOYO: Add socket operation restriction support.

2011-09-14 08:27:05 +10:00

group.c

TOMOYO: Add socket operation restriction support.

2011-09-14 08:27:05 +10:00

Kconfig

TOMOYO: Add socket operation restriction support.

2011-09-14 08:27:05 +10:00

load_policy.c

TOMOYO: Update kernel-doc.

2011-07-14 17:50:03 +10:00

Makefile

TOMOYO: Add socket operation restriction support.

2011-09-14 08:27:05 +10:00

memory.c

TOMOYO: Update kernel-doc.

2011-07-14 17:50:03 +10:00

mount.c

TOMOYO: Update kernel-doc.

2011-07-14 17:50:03 +10:00

network.c

TOMOYO: Add socket operation restriction support.

2011-09-14 08:27:05 +10:00

realpath.c

TOMOYO: Add socket operation restriction support.

2011-09-14 08:27:05 +10:00

securityfs_if.c

TOMOYO: Allow domain transition without execve().

2011-09-14 08:27:06 +10:00

tomoyo.c

TOMOYO: Add socket operation restriction support.

2011-09-14 08:27:05 +10:00

util.c

TOMOYO: Allow domain transition without execve().

2011-09-14 08:27:06 +10:00