diff options
| author |   Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> | 2011-09-10 15:25:58 +0900 |
|---|---|---|
| committer |   James Morris <jmorris@namei.org> | 2011-09-14 08:27:06 +1000 |
| commit | 731d37aa70c7b9de3be6bf2c8287366223bf5ce5 (patch) | |
| tree | 8ac6028511485862572695eb91e2d461e0636182 /include/linux/kernel.h | |
| parent | TOMOYO: Allow controlling generation of access granted logs for per an entry basis. (diff) | |
| download | wireguard-linux-731d37aa70c7b9de3be6bf2c8287366223bf5ce5.tar.xz wireguard-linux-731d37aa70c7b9de3be6bf2c8287366223bf5ce5.zip | |
TOMOYO: Allow domain transition without execve().
To be able to split permissions for Apache's CGI programs which are executed
without execve(), add special domain transition which is performed by writing
a TOMOYO's domainname to /sys/kernel/security/tomoyo/self_domain interface.
This is an API for TOMOYO-aware userland applications. However, since I expect
TOMOYO and other LSM modules to run in parallel, this patch does not use
/proc/self/attr/ interface in order to avoid conflicts with other LSM modules
when it became possible to run multiple LSM modules in parallel.
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>
Diffstat (limited to 'include/linux/kernel.h')
0 files changed, 0 insertions, 0 deletions