TOMOYO: Add socket operation restriction support.
authorTetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Sat, 10 Sep 2011 06:23:54 +0000 (15:23 +0900)
committerJames Morris <jmorris@namei.org>
Tue, 13 Sep 2011 22:27:05 +0000 (08:27 +1000)
commit059d84dbb3897d4ee494a9c842c5dda54316cb47
tree483ca0cb613b1304184b92f075b3f5283d36c723
parentd58e0da854376841ac99defeb117a83f086715c6
TOMOYO: Add socket operation restriction support.

This patch adds support for permission checks for PF_INET/PF_INET6/PF_UNIX
socket's bind()/listen()/connect()/send() operations.

Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>
security/tomoyo/Kconfig
security/tomoyo/Makefile
security/tomoyo/common.c
security/tomoyo/common.h
security/tomoyo/gc.c
security/tomoyo/group.c
security/tomoyo/network.c [new file with mode: 0644]
security/tomoyo/realpath.c
security/tomoyo/tomoyo.c
security/tomoyo/util.c