Smack: Verify read access on file open - v3
authorCasey Schaufler <casey@schaufler-ca.com>
Mon, 21 Apr 2014 18:10:26 +0000 (11:10 -0700)
committerCasey Schaufler <casey@schaufler-ca.com>
Wed, 23 Apr 2014 15:52:39 +0000 (08:52 -0700)
commita6834c0b9114c06106efee8e9f2a11fbbb104567
tree61086ddbe2c1e5fbb7d9d487f801f6c0623901b7
parent54e70ec5eb090193b03e69d551fa6771a5a217c4
Smack: Verify read access on file open - v3

Smack believes that many of the operatons that can
be performed on an open file descriptor are read operations.
The fstat and lseek system calls are examples.
An implication of this is that files shouldn't be open
if the task doesn't have read access even if it has
write access and the file is being opened write only.

Targeted for git://git.gitorious.org/smack-next/kernel.git

Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
security/smack/smack_lsm.c