Tetsuo Handa a8f7640963 TOMOYO: Avoid race when retrying "file execute" permission check. ...

There was a race window that the pathname which is subjected to "file execute"
permission check when retrying via supervisor's decision because the pathname
was recalculated upon retry. Though, there is an inevitable race window even
without supervisor, for we have to calculate the symbolic link's pathname from
"struct linux_binprm"->filename rather than from "struct linux_binprm"->file
because we cannot back calculate the symbolic link's pathname from the
dereferenced pathname.

Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>

2011-09-14 08:27:07 +10:00

..

audit.c

TOMOYO: Allow controlling generation of access granted logs for per an entry basis.

2011-09-14 08:27:06 +10:00

common.c

TOMOYO: Allow domain transition without execve().

2011-09-14 08:27:06 +10:00

common.h

TOMOYO: Allow domain transition without execve().

2011-09-14 08:27:06 +10:00

condition.c

TOMOYO: Allow controlling generation of access granted logs for per an entry basis.

2011-09-14 08:27:06 +10:00

domain.c

TOMOYO: Avoid race when retrying "file execute" permission check.

2011-09-14 08:27:07 +10:00

environ.c

TOMOYO: Add environment variable name restriction support.

2011-09-14 08:27:05 +10:00

file.c

TOMOYO: Update kernel-doc.

2011-07-14 17:50:03 +10:00

gc.c

TOMOYO: Add socket operation restriction support.

2011-09-14 08:27:05 +10:00

group.c

TOMOYO: Add socket operation restriction support.

2011-09-14 08:27:05 +10:00

Kconfig

TOMOYO: Add socket operation restriction support.

2011-09-14 08:27:05 +10:00

load_policy.c

TOMOYO: Update kernel-doc.

2011-07-14 17:50:03 +10:00

Makefile

TOMOYO: Add socket operation restriction support.

2011-09-14 08:27:05 +10:00

memory.c

TOMOYO: Update kernel-doc.

2011-07-14 17:50:03 +10:00

mount.c

TOMOYO: Update kernel-doc.

2011-07-14 17:50:03 +10:00

network.c

TOMOYO: Add socket operation restriction support.

2011-09-14 08:27:05 +10:00

realpath.c

TOMOYO: Add socket operation restriction support.

2011-09-14 08:27:05 +10:00

securityfs_if.c

TOMOYO: Allow domain transition without execve().

2011-09-14 08:27:06 +10:00

tomoyo.c

TOMOYO: Add socket operation restriction support.

2011-09-14 08:27:05 +10:00

util.c

TOMOYO: Allow domain transition without execve().

2011-09-14 08:27:06 +10:00