diff options
| author | Harry Ciao <qingtao.cao@windriver.com> | 2011-03-02 13:32:33 +0800 |
|---|---|---|
| committer | Eric Paris <eparis@redhat.com> | 2011-03-03 15:19:43 -0500 |
| commit | 6f5317e730505d5cbc851c435a2dfe3d5a21d343 (patch) | |
| tree | 02088cf519a00db5c6fbdb2cc8776402413eb662 /security/tomoyo | |
| parent | 4bc6c2d5d8386800fde23a8e78cd4f04a0ade0ad (diff) | |
| download | linux-6f5317e730505d5cbc851c435a2dfe3d5a21d343.tar.gz linux-6f5317e730505d5cbc851c435a2dfe3d5a21d343.tar.bz2 linux-6f5317e730505d5cbc851c435a2dfe3d5a21d343.zip | |
SELinux: Socket retains creator role and MLS attribute
The socket SID would be computed on creation and no longer inherit
its creator's SID by default. Socket may have a different type but
needs to retain the creator's role and MLS attribute in order not
to break labeled networking and network access control.
The kernel value for a class would be used to determine if the class
if one of socket classes. If security_compute_sid is called from
userspace the policy value for a class would be mapped to the relevant
kernel value first.
Signed-off-by: Harry Ciao <qingtao.cao@windriver.com>
Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Diffstat (limited to 'security/tomoyo')
0 files changed, 0 insertions, 0 deletions