You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Eric Paris 788084aba2 Security/SELinux: seperate lsm specific mmap_min_addr ... Currently SELinux enforcement of controls on the ability to map low memory is determined by the mmap_min_addr tunable. This patch causes SELinux to ignore the tunable and instead use a seperate Kconfig option specific to how much space the LSM should protect. The tunable will now only control the need for CAP_SYS_RAWIO and SELinux permissions will always protect the amount of low memory designated by CONFIG_LSM_MMAP_MIN_ADDR. This allows users who need to disable the mmap_min_addr controls (usual reason being they run WINE as a non-root user) to do so and still have SELinux controls preventing confined domains (like a web server) from being able to map some area of low memory. Signed-off-by: Eric Paris <eparis@redhat.com> Signed-off-by: James Morris <jmorris@namei.org>		16 years ago
..
include	SELinux: move SELINUX_MAGIC into magic.h	16 years ago
ss	Permissive domain in userspace object manager	16 years ago
Kconfig	selinux: Deprecate and schedule the removal of the the compat_net functionality	16 years ago
Makefile	SELinux: Add network port SID cache	17 years ago
avc.c	Permissive domain in userspace object manager	16 years ago
exports.c	CRED: Wrap current->cred and a few other accessors	16 years ago
hooks.c	Security/SELinux: seperate lsm specific mmap_min_addr	16 years ago
netif.c	SELinux fixups needed for preemptable RCU from -rt	17 years ago
netlabel.c	netlabel: Label incoming TCP connections correctly in SELinux	16 years ago
netlink.c	SELinux: netlink.c whitespace, syntax, and static declaraction cleanups	17 years ago
netnode.c	SELinux: keep the code clean formating and syntax	17 years ago
netport.c	SELinux: keep the code clean formating and syntax	17 years ago
nlmsgtab.c	SELinux: define audit permissions for audit tree netlink messages	16 years ago
selinuxfs.c	selinux: remove obsolete read buffer limit from sel_read_bool	16 years ago
xfrm.c	net: skb->dst accessors	16 years ago