TOMOYO: Allow using argv[]/envp[] of execve() as conditions.
authorTetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Fri, 8 Jul 2011 04:24:54 +0000 (13:24 +0900)
committerJames Morris <jmorris@namei.org>
Mon, 11 Jul 2011 01:05:33 +0000 (11:05 +1000)
commit5b636857fee642694e287e3a181b523b16098c93
tree24afcc11fc35350a29f5d6d73d376a551c5569b8
parent2ca9bf453bdd478bcb6c01aa2d0bd4c2f4350563
TOMOYO: Allow using argv[]/envp[] of execve() as conditions.

This patch adds support for permission checks using argv[]/envp[] of execve()
request. Hooks are in the last patch of this pathset.

Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>
security/tomoyo/audit.c
security/tomoyo/common.c
security/tomoyo/common.h
security/tomoyo/condition.c
security/tomoyo/domain.c
security/tomoyo/gc.c