[prev in list] [next in list] [prev in thread] [next in thread] 

List:       linux-security-module
Subject:    Re: [PATCH] Smack: Ptrace access check mode
From:       Casey Schaufler <casey () schaufler-ca ! com>
Date:       2013-10-28 17:25:48
Message-ID: 526E9E1C.9060509 () schaufler-ca ! com
[Download RAW message or body]

On 10/22/2013 11:47 AM, Casey Schaufler wrote:
> Subject: [PATCH] Smack: Ptrace access check mode
>
> When the ptrace security hooks were split the addition of
> a mode parameter was not taken advantage of in the Smack
> ptrace access check. This changes the access check from
> always looking for read and write access to using the
> passed mode. This will make use of /proc much happier.
>
> Targeted for git://git.gitorious.org/smack-next/kernel.git
>
> Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>

Applied to git://git.gitorious.org/smack-next/kernel.git#smack-for-3.13
 

>
> ---
>  security/smack/smack_lsm.c |    2 +-
>  1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/security/smack/smack_lsm.c b/security/smack/smack_lsm.c
> index 88d366e5..b0be893 100644
> --- a/security/smack/smack_lsm.c
> +++ b/security/smack/smack_lsm.c
> @@ -185,7 +185,7 @@ static int smack_ptrace_access_check(struct task_struct *ctp, unsigned int mode)
>  	smk_ad_init(&ad, __func__, LSM_AUDIT_DATA_TASK);
>  	smk_ad_setfield_u_tsk(&ad, ctp);
>  
> -	rc = smk_curacc(skp->smk_known, MAY_READWRITE, &ad);
> +	rc = smk_curacc(skp->smk_known, mode, &ad);
>  	return rc;
>  }
>  
>
> --
> To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>

--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
[prev in list] [next in list] [prev in thread] [next in thread]