You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Eric Paris 788084aba2 Security/SELinux: seperate lsm specific mmap_min_addr ... Currently SELinux enforcement of controls on the ability to map low memory is determined by the mmap_min_addr tunable. This patch causes SELinux to ignore the tunable and instead use a seperate Kconfig option specific to how much space the LSM should protect. The tunable will now only control the need for CAP_SYS_RAWIO and SELinux permissions will always protect the amount of low memory designated by CONFIG_LSM_MMAP_MIN_ADDR. This allows users who need to disable the mmap_min_addr controls (usual reason being they run WINE as a non-root user) to do so and still have SELinux controls preventing confined domains (like a web server) from being able to map some area of low memory. Signed-off-by: Eric Paris <eparis@redhat.com> Signed-off-by: James Morris <jmorris@namei.org>		16 years ago
..
include	SELinux: move SELINUX_MAGIC into magic.h	16 years ago
ss	…
Kconfig	…
Makefile	…
avc.c	…
exports.c	…
hooks.c	Security/SELinux: seperate lsm specific mmap_min_addr	16 years ago
netif.c	…
netlabel.c	…
netlink.c	…
netnode.c	…
netport.c	…
nlmsgtab.c	SELinux: define audit permissions for audit tree netlink messages	16 years ago
selinuxfs.c	selinux: remove obsolete read buffer limit from sel_read_bool	16 years ago
xfrm.c	net: skb->dst accessors	16 years ago