You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Lorenzo Hern�ndez Garc�a-Hierro 09ffd94fb1 [PATCH] selinux: add executable heap check ... This patch,based on sample code by Roland McGrath, adds an execheap permission check that controls the ability to make the heap executable so that this can be prevented in almost all cases (the X server is presently an exception, but this will hopefully be resolved in the future) so that even programs with execmem permission will need to have the anonymous memory mapped in order to make it executable. The only reason that we use a permission check for such restriction (vs. making it unconditional) is that the X module loader presently needs it; it could possibly be made unconditional in the future when X is changed. The policy patch for the execheap permission is available at: http://pearls.tuxedo-es.org/patches/selinux/policy-execheap.patch Signed-off-by: Lorenzo Hernandez Garcia-Hierro <lorenzo@gnu.org> Acked-by: James Morris <jmorris@redhat.com> Acked-by: Stephen Smalley <sds@tycho.nsa.gov> Cc: Ingo Molnar <mingo@elte.hu> Signed-off-by: Andrew Morton <akpm@osdl.org> Signed-off-by: Linus Torvalds <torvalds@osdl.org>		20 years ago
..
av_inherit.h	[PATCH] SELinux: add support for NETLINK_KOBJECT_UEVENT	20 years ago
av_perm_to_string.h	[PATCH] selinux: add executable heap check	20 years ago
av_permissions.h	[PATCH] selinux: add executable heap check	20 years ago
avc.h	Linux-2.6.12-rc2	20 years ago
avc_ss.h	Linux-2.6.12-rc2	20 years ago
class_to_string.h	[PATCH] SELinux: add support for NETLINK_KOBJECT_UEVENT	20 years ago
common_perm_to_string.h	Linux-2.6.12-rc2	20 years ago
conditional.h	Linux-2.6.12-rc2	20 years ago
flask.h	[PATCH] SELinux: add support for NETLINK_KOBJECT_UEVENT	20 years ago
initial_sid_to_string.h	Linux-2.6.12-rc2	20 years ago
netif.h	Linux-2.6.12-rc2	20 years ago
objsec.h	Linux-2.6.12-rc2	20 years ago
security.h	Linux-2.6.12-rc2	20 years ago