Rafal Krypa c0d77c8844 Smack: allow multiple labels in onlycap ...

Smack onlycap allows limiting of CAP_MAC_ADMIN and CAP_MAC_OVERRIDE to
processes running with the configured label. But having single privileged
label is not enough in some real use cases. On a complex system like Tizen,
there maybe few programs that need to configure Smack policy in run-time
and running them all with a single label is not always practical.
This patch extends onlycap feature for multiple labels. They are configured
in the same smackfs "onlycap" interface, separated by spaces.

Signed-off-by: Rafal Krypa <r.krypa@samsung.com>

2015-06-02 11:53:42 -07:00

..

Kconfig

Smack: secmark support for netfilter

2015-01-20 16:34:25 -08:00

Makefile

Smack: Repair netfilter dependency

2015-01-23 10:08:19 -08:00

smack_access.c

Smack: allow multiple labels in onlycap

2015-06-02 11:53:42 -07:00

smack_lsm.c

smack: pass error code through pointers

2015-05-15 08:36:03 -07:00

smack_netfilter.c

netfilter: Make nf_hookfn use nf_hook_state.

2015-04-04 12:31:38 -04:00

smack.h

Smack: allow multiple labels in onlycap

2015-06-02 11:53:42 -07:00

smackfs.c

Smack: allow multiple labels in onlycap

2015-06-02 11:53:42 -07:00