Re: Subject: [PATCH] Smack: mmap controls for library containment

From: Casey Schaufler
Date: Wed Feb 09 2011 - 08:15:31 EST


On 2/8/2011 11:51 PM, James Morris wrote:
> On Tue, 8 Feb 2011, Casey Schaufler wrote:
>
> Subject: [PATCH] Smack: correct behavior in the mmap hook
>
> The mmap policy enforcement was not properly handling the
> interaction between the global and local rule lists.
> Instead of going through one and then the other, which
> missed the important case where a rule specified that
> there should be no access, combine the access limitations
> where there is a rule in each list.
>
> Signed-off-by: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
> Applied to
> git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/security-testing-2.6#next
>

James, I made an error and failed to say that this and Shan Wei's clean-up
should be pulled from git://gitorious.org/smack-next/kernel.git


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/