diff options
| author | Casey Schaufler <casey@schaufler-ca.com> | 2013-12-16 16:27:26 -0800 |
|---|---|---|
| committer | Casey Schaufler <casey@schaufler-ca.com> | 2013-12-19 13:05:24 -0800 |
| commit | 19760ad03cc639d6f6f8e9beff0f8e6df654b677 (patch) | |
| tree | 66f40219fd1a35b7d6bee6eab7aee0fa8405a287 /security/smack/smackfs.c | |
| parent | 398ce073700a2a3e86b5a0b1edecdddfa3996b27 (diff) | |
Smack: Prevent the * and @ labels from being used in SMACK64EXEC
Smack prohibits processes from using the star ("*") and web ("@") labels
because we don't want files with those labels getting created implicitly.
All setting of those labels should be done explicitly. The trouble is that
there is no check for these labels in the processing of SMACK64EXEC. That
is repaired.
Targeted for git://git.gitorious.org/smack-next/kernel.git
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Diffstat (limited to 'security/smack/smackfs.c')
0 files changed, 0 insertions, 0 deletions