| commit | c6993e4ac002c92bc75379212e9179c36d4bf7ee | |
| author | Kees Cook <keescook@chromium.org> | |
| Tue, 4 Sep 2012 20:32:13 +0000 (4 13:32 -0700) | ||
| committer | James Morris <james.l.morris@oracle.com> | |
| Wed, 5 Sep 2012 21:12:31 +0000 (5 14:12 -0700) | ||
| tree | cdb4c800ea3cf4003b07087166cc767dab79032f | treesnapshot (tar.gz zip) |
| parent | 81198078d7da4240f3cbfc2c6a8ea6cd417f51a7 | commitdiff |
security: allow Yama to be unconditionally stacked
Unconditionally call Yama when CONFIG_SECURITY_YAMA_STACKED is selected,
no matter what LSM module is primary.
Ubuntu and Chrome OS already carry patches to do this, and Fedora
has voiced interest in doing this as well. Instead of having multiple
distributions (or LSM authors) carrying these patches, just allow Yama
to be called unconditionally when selected by the new CONFIG.
Signed-off-by: Kees Cook <keescook@chromium.org>
Acked-by: Serge E. Hallyn <serge.hallyn@canonical.com>
Acked-by: Eric Paris <eparis@redhat.com>
Acked-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: James Morris <james.l.morris@oracle.com>
Unconditionally call Yama when CONFIG_SECURITY_YAMA_STACKED is selected,
no matter what LSM module is primary.
Ubuntu and Chrome OS already carry patches to do this, and Fedora
has voiced interest in doing this as well. Instead of having multiple
distributions (or LSM authors) carrying these patches, just allow Yama
to be called unconditionally when selected by the new CONFIG.
Signed-off-by: Kees Cook <keescook@chromium.org>
Acked-by: Serge E. Hallyn <serge.hallyn@canonical.com>
Acked-by: Eric Paris <eparis@redhat.com>
Acked-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: James Morris <james.l.morris@oracle.com>
| include/linux/security.h | diffblobblamehistory | |
| security/security.c | diffblobblamehistory | |
| security/yama/Kconfig | diffblobblamehistory | |
| security/yama/yama_lsm.c | diffblobblamehistory |