[prev in list] [next in list] [prev in thread] [next in thread] 

List:       linux-security-module
Subject:    [PATCHv2] Smack: add support for modification of existing rules
From:       Rafal Krypa <r.krypa () samsung ! com>
Date:       2012-11-28 17:43:28
Message-ID: 1354124609-16829-1-git-send-email-r.krypa () samsung ! com
[Download RAW message or body]

The following patch introduces in-place modification of Smack rules.
Until now Smack supported only overwriting of existing rules.
To change permitted access for a given subject and object, user had
to read list of rules to get current accesses, modify it and write
modified rule back to kernel. This way was inefficient, non-atomic
and unnecessarily difficult.
New interface is intended to ease such modifications.

Changes in v2:
- dropped patches for smackfs seq list operations
- changed modification approach to simple integer assignment

Rafal Krypa (1):

  Smack: add support for modification of existing rules

 Documentation/security/Smack.txt |   11 ++
 security/smack/smackfs.c         |  249 ++++++++++++++++++++++++++------------
 2 files changed, 181 insertions(+), 79 deletions(-)

-- 
1.7.10.4

--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
[prev in list] [next in list] [prev in thread] [next in thread]