TOMOYO: Allow using executable's realpath and symlink's target as conditions.
authorTetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Fri, 8 Jul 2011 04:23:44 +0000 (13:23 +0900)
committerJames Morris <jmorris@namei.org>
Mon, 11 Jul 2011 01:05:33 +0000 (11:05 +1000)
commit2ca9bf453bdd478bcb6c01aa2d0bd4c2f4350563
treeb9f6051059a2a90547a4501bf296b0cf3c9dbc76
parent8761afd49ebff8ae04c1a7888af090177441d07d
TOMOYO: Allow using executable's realpath and symlink's target as conditions.

This patch adds support for permission checks using executable file's realpath
upon execve() and symlink's target upon symlink(). Hooks are in the last patch
of this pathset.

Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>
security/tomoyo/audit.c
security/tomoyo/common.c
security/tomoyo/common.h
security/tomoyo/condition.c
security/tomoyo/gc.c