[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <20110826102612.087b673e.rdunlap@xenotime.net>
Date: Fri, 26 Aug 2011 10:26:12 -0700
From: Randy Dunlap <rdunlap@...otime.net>
To: Jarkko Sakkinen <jarkko.sakkinen@...el.com>
Cc: Casey Schaufler <casey@...aufler-ca.com>,
linux-kernel@...r.kernel.org, linux-security-module@...r.kernel.org
Subject: Re: [PATCH] Smack: SMACK_IOCLOADACCESS
On Fri, 26 Aug 2011 08:52:07 +0300 Jarkko Sakkinen wrote:
> IOCTL call for /smack/load that takes access rule in
> the same format as they are written into /smack/load.
> Sets errno to zero if access is allowed and to EACCES
> if not.
>
> Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen@...el.com>
> ---
> include/linux/smack.h | 29 ++++++++
> security/smack/smack.h | 1 +
> security/smack/smackfs.c | 173 +++++++++++++++++++++++++++++-----------------
> 3 files changed, 140 insertions(+), 63 deletions(-)
> create mode 100644 include/linux/smack.h
>
> diff --git a/include/linux/smack.h b/include/linux/smack.h
> new file mode 100644
> index 0000000..c574713
> --- /dev/null
> +++ b/include/linux/smack.h
> @@ -0,0 +1,29 @@
> +/*
> + * Copyright (c) 2011, Intel Corporation.
> + *
> + * This program is free software; you can redistribute it and/or
> + * modify it under the terms of the GNU Lesser General Public License
> + * as published by the Free Software Foundation; either version 2.1
> + * of the License, or (at your option) any later version.
> + *
> + * This program is distributed in the hope that it will be useful,
> + * but WITHOUT ANY WARRANTY; without even the implied warranty of
> + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
> + * GNU General Public License for more details.
> + *
> + * You should have received a copy of the GNU Lesser General Public License
> + * along with this program; if not, write to the Free Software
> + * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
> + *
> + * Author:
> + * Jarkko Sakkinen <jarkko.sakkinen@...el.com>
> + *
> + */
> +
> +#ifndef _SMACK_H
> +#define _SMACK_H
> +
> +#define SMACK_IOC_BASE 'S'
> +#define SMACK_IOC_LOAD_ACCESS _IOR(SMACK_IOC_BASE, 0, const char *)
> +
> +#endif /* _SMACK_H */
Please add this 'S' to Documentation/ioctl/ioctl-number.txt.
Thanks.
---
~Randy
*** Remember to use Documentation/SubmitChecklist when testing your code ***
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists